chore: update star history

2026-07-29 09:38:59 +00:00 · 2026-07-29 04:21:42 +00:00 · 2026-07-28 04:20:51 +00:00 · 2026-07-27 04:28:05 +00:00 · 2026-07-26 04:24:45 +00:00 · 2026-07-25 04:21:07 +00:00
915 changed files with 3878 additions and 268044 deletions
@@ -1,64 +0,0 @@
-## —— Development/Source builds using direct buildx commands ---------------------------------------
-
-.PHONY: docker-dev
-docker-dev: ## Build dev multi-arch image (cannot load locally)
-	@echo "🏗️ Building multi-architecture development Docker images with buildx..."
-	@echo "💡 This builds from source code and is intended for local development and testing"
-	@echo "⚠️  Multi-arch images cannot be loaded locally, use docker-dev-push to push to registry"
-	$(DOCKER_CLI) buildx build \
-		--platform linux/amd64,linux/arm64 \
-		--file $(DOCKERFILE_SOURCE) \
-		--tag rustfs:source-latest \
-		--tag rustfs:dev-latest \
-		.
-
-.PHONY: docker-dev-local
-docker-dev-local: ## Build dev single-arch image (local load)
-	@echo "🏗️ Building single-architecture development Docker image for local use..."
-	@echo "💡 This builds from source code for the current platform and loads locally"
-	$(DOCKER_CLI) buildx build \
-		--file $(DOCKERFILE_SOURCE) \
-		--tag rustfs:source-latest \
-		--tag rustfs:dev-latest \
-		--load \
-		.
-
-.PHONY: docker-dev-push
-docker-dev-push: ## Build and push multi-arch development image # e.g (make docker-dev-push REGISTRY=xxx)
-	@if [ -z "$(REGISTRY)" ]; then \
-		echo "❌ Error: Please specify registry, example: make docker-dev-push REGISTRY=ghcr.io/username"; \
-		exit 1; \
-	fi
-	@echo "🚀 Building and pushing multi-architecture development Docker images..."
-	@echo "💡 Pushing to registry: $(REGISTRY)"
-	$(DOCKER_CLI) buildx build \
-		--platform linux/amd64,linux/arm64 \
-		--file $(DOCKERFILE_SOURCE) \
-		--tag $(REGISTRY)/rustfs:source-latest \
-		--tag $(REGISTRY)/rustfs:dev-latest \
-		--push \
-		.
-
-.PHONY: dev-env-start
-dev-env-start: ## Start development container environment
-	@echo "🚀 Starting development environment..."
-	$(DOCKER_CLI) buildx build \
-		--file $(DOCKERFILE_SOURCE) \
-		--tag rustfs:dev \
-		--load \
-		.
-	$(DOCKER_CLI) stop $(CONTAINER_NAME) 2>/dev/null || true
-	$(DOCKER_CLI) rm $(CONTAINER_NAME) 2>/dev/null || true
-	$(DOCKER_CLI) run -d --name $(CONTAINER_NAME) \
-		-p 9010:9010 -p 9000:9000 \
-		-v $(shell pwd):/workspace \
-		-it rustfs:dev
-
-.PHONY: dev-env-stop
-dev-env-stop: ## Stop development container environment
-	@echo "🛑 Stopping development environment..."
-	$(DOCKER_CLI) stop $(CONTAINER_NAME) 2>/dev/null || true
-	$(DOCKER_CLI) rm $(CONTAINER_NAME) 2>/dev/null || true
-
-.PHONY: dev-env-restart
-dev-env-restart: dev-env-stop dev-env-start ## Restart development container environment
@@ -1,41 +0,0 @@
-## —— Production builds using docker buildx (for CI/CD and production) -----------------------------
-
-.PHONY: docker-buildx
-docker-buildx: ## Build production multi-arch image (no push)
-	@echo "🏗️ Building multi-architecture production Docker images with buildx..."
-	./docker-buildx.sh
-
-.PHONY: docker-buildx-push
-docker-buildx-push: ## Build and push production multi-arch image
-	@echo "🚀 Building and pushing multi-architecture production Docker images with buildx..."
-	./docker-buildx.sh --push
-
-.PHONY: docker-buildx-version
-docker-buildx-version: ## Build and version production multi-arch image # e.g (make docker-buildx-version VERSION=v1.0.0)
-	@if [ -z "$(VERSION)" ]; then \
-		echo "❌ Error: Please specify version, example: make docker-buildx-version VERSION=v1.0.0"; \
-		exit 1; \
-	fi
-	@echo "🏗️ Building multi-architecture production Docker images (version: $(VERSION))..."
-	./docker-buildx.sh --release $(VERSION)
-
-.PHONY: docker-buildx-push-version
-docker-buildx-push-version: ## Build and version and push production multi-arch image # e.g (make docker-buildx-push-version VERSION=v1.0.0)
-	@if [ -z "$(VERSION)" ]; then \
-		echo "❌ Error: Please specify version, example: make docker-buildx-push-version VERSION=v1.0.0"; \
-		exit 1; \
-	fi
-	@echo "🚀 Building and pushing multi-architecture production Docker images (version: $(VERSION))..."
-	./docker-buildx.sh --release $(VERSION) --push
-
-.PHONY: docker-buildx-production-local
-docker-buildx-production-local: ## Build production single-arch image locally
-	@echo "🏗️ Building single-architecture production Docker image locally..."
-	@echo "💡 Alternative to docker-buildx.sh for local testing"
-	$(DOCKER_CLI) buildx build \
-		--file $(DOCKERFILE_PRODUCTION) \
-		--tag rustfs:production-latest \
-		--tag rustfs:latest \
-		--load \
-		--build-arg RELEASE=latest \
-		.
@@ -1,16 +0,0 @@
-## —— Single Architecture Docker Builds (Traditional) ----------------------------------------------
-
-.PHONY: docker-build-production
-docker-build-production: ## Build single-arch production image
-	@echo "🏗️ Building single-architecture production Docker image..."
-	@echo "💡 Consider using 'make docker-buildx-production-local' for multi-arch support"
-	$(DOCKER_CLI) build -f $(DOCKERFILE_PRODUCTION) -t rustfs:latest .
-
-.PHONY: docker-build-source
-docker-build-source: ## Build single-arch source image
-	@echo "🏗️ Building single-architecture source Docker image..."
-	@echo "💡 Consider using 'make docker-dev-local' for multi-arch support"
-	DOCKER_BUILDKIT=1 $(DOCKER_CLI) build \
-		--build-arg BUILDKIT_INLINE_CACHE=1 \
-		-f $(DOCKERFILE_SOURCE) -t rustfs:source .
-
@@ -1,22 +0,0 @@
-## —— Docker-based build (alternative approach) ----------------------------------------------------
-
-# Usage: make BUILD_OS=ubuntu22.04 build-docker
-# Output: target/ubuntu22.04/release/rustfs
-
-.PHONY: build-docker
-build-docker: SOURCE_BUILD_IMAGE_NAME = rustfs-$(BUILD_OS):v1
-build-docker: SOURCE_BUILD_CONTAINER_NAME = rustfs-$(BUILD_OS)-build
-build-docker: BUILD_CMD = /root/.cargo/bin/cargo build --release --bin rustfs --target-dir /root/s3-rustfs/target/$(BUILD_OS)
-build-docker: ## Build using Docker container # e.g (make build-docker BUILD_OS=ubuntu22.04)
-	@echo "🐳 Building RustFS using Docker ($(BUILD_OS))..."
-	$(DOCKER_CLI) buildx build -t $(SOURCE_BUILD_IMAGE_NAME) -f $(DOCKERFILE_SOURCE) .
-	$(DOCKER_CLI) run --rm --name $(SOURCE_BUILD_CONTAINER_NAME) -v $(shell pwd):/root/s3-rustfs -it $(SOURCE_BUILD_IMAGE_NAME) $(BUILD_CMD)
-
-.PHONY: docker-inspect-multiarch
-docker-inspect-multiarch: ## Check image architecture support
-	@if [ -z "$(IMAGE)" ]; then \
-		echo "❌ Error: Please specify image, example: make docker-inspect-multiarch IMAGE=rustfs/rustfs:latest"; \
-		exit 1; \
-	fi
-	@echo "🔍 Inspecting multi-architecture image: $(IMAGE)"
-	docker buildx imagetools inspect $(IMAGE)
@@ -1,55 +0,0 @@
-## —— Local Native Build using build-rustfs.sh script (Recommended) --------------------------------
-
-.PHONY: build
-build: ## Build RustFS binary (includes console by default)
-	@echo "🔨 Building RustFS using build-rustfs.sh script..."
-	./build-rustfs.sh
-
-.PHONY: build-dev
-build-dev: ## Build RustFS in Development mode
-	@echo "🔨 Building RustFS in development mode..."
-	./build-rustfs.sh --dev
-
-.PHONY: build-musl
-build-musl: ## Build x86_64 musl version
-	@echo "🔨 Building rustfs for x86_64-unknown-linux-musl..."
-	@echo "💡 On macOS/Windows, use 'make build-docker' or 'make docker-dev' instead"
-	./build-rustfs.sh --platform x86_64-unknown-linux-musl
-
-.PHONY: build-gnu
-build-gnu: ## Build x86_64 GNU version
-	@echo "🔨 Building rustfs for x86_64-unknown-linux-gnu..."
-	@echo "💡 On macOS/Windows, use 'make build-docker' or 'make docker-dev' instead"
-	./build-rustfs.sh --platform x86_64-unknown-linux-gnu
-
-.PHONY: build-musl-arm64
-build-musl-arm64: ## Build aarch64 musl version
-	@echo "🔨 Building rustfs for aarch64-unknown-linux-musl..."
-	@echo "💡 On macOS/Windows, use 'make build-docker' or 'make docker-dev' instead"
-	./build-rustfs.sh --platform aarch64-unknown-linux-musl
-
-.PHONY: build-gnu-arm64
-build-gnu-arm64: ## Build aarch64 GNU version
-	@echo "🔨 Building rustfs for aarch64-unknown-linux-gnu..."
-	@echo "💡 On macOS/Windows, use 'make build-docker' or 'make docker-dev' instead"
-	./build-rustfs.sh --platform aarch64-unknown-linux-gnu
-
-
-.PHONY: build-cross-all
-build-cross-all: core-deps ## Build binaries for all architectures
-	@echo "🔧 Building all target architectures..."
-	@echo "💡 On macOS/Windows, use 'make docker-dev' for reliable multi-arch builds"
-	@echo "🔨 Generating protobuf code..."
-	cargo run --bin gproto || true
-
-	@echo "🔨 Building rustfs for x86_64-unknown-linux-musl..."
-	./build-rustfs.sh --platform x86_64-unknown-linux-musl
-
-	@echo "🔨 Building rustfs for x86_64-unknown-linux-gnu..."
-	./build-rustfs.sh --platform x86_64-unknown-linux-gnu
-
-	@echo "🔨 Building rustfs for aarch64-unknown-linux-musl..."
-	./build-rustfs.sh --platform aarch64-unknown-linux-musl
-
-	@echo "🔨 Building rustfs for aarch64-unknown-linux-gnu..."
-	./build-rustfs.sh --platform aarch64-unknown-linux-gnu
@@ -1,24 +0,0 @@
-## —— Check and Inform Dependencies ----------------------------------------------------------------
-
-# Fatal check
-# Checks all required dependencies and exits with error if not found
-# (e.g., cargo, rustfmt)
-check-%:
-	@command -v $* >/dev/null 2>&1 || { \
-		echo >&2 "❌ '$*' is not installed."; \
-		exit 1; \
-	}
-
-# Warning-only check
-# Checks for optional dependencies and issues a warning if not found
-# (e.g., cargo-nextest for enhanced testing)
-warn-%:
-	@command -v $* >/dev/null 2>&1 || { \
-		echo >&2 "⚠️ '$*' is not installed."; \
-	}
-
-# For checking dependencies use check-<dep-name> or warn-<dep-name>
-.PHONY: core-deps fmt-deps test-deps
-core-deps: check-cargo ## Check core dependencies
-fmt-deps: check-rustfmt ## Check lint and formatting dependencies
-test-deps: warn-cargo-nextest ## Check tests dependencies
@@ -1,6 +0,0 @@
-## —— Deploy using dev_deploy.sh script ------------------------------------------------------------
-
-.PHONY: deploy-dev
-deploy-dev: build-musl ## Deploy to dev server
-	@echo "🚀 Deploying to dev server: $${IP}"
-	./scripts/dev_deploy.sh $${IP}
@@ -1,38 +0,0 @@
-## —— Help, Help Build and Help Docker -------------------------------------------------------------
-
-
-.PHONY: help
-help: ## Shows This Help Menu
-	echo -e "$$HEADER"
-	grep -E '(^[a-zA-Z0-9_-]+:.*?## .*$$)|(^## )' $(MAKEFILE_LIST) | sed 's/^[^:]*://g' | awk 'BEGIN {FS = ":.*?## | #"} ; {printf "${cyan}%-30s${reset} ${white}%s${reset} ${green}%s${reset}\n", $$1, $$2, $$3}' | sed -e 's/\[36m##/\n[32m##/'
-
-.PHONY: help-build
-help-build: ## Shows RustFS build help
-	@echo ""
-	@echo "💡 build-rustfs.sh script provides more options, smart detection and binary verification"
-	@echo ""
-	@echo "🔧 Direct usage of build-rustfs.sh script:"
-	@echo ""
-	@echo "	./build-rustfs.sh --help                                # View script help"
-	@echo "	./build-rustfs.sh --no-console                          # Build without console resources"
-	@echo "	./build-rustfs.sh --force-console-update                # Force update console resources"
-	@echo "	./build-rustfs.sh --dev                                 # Development mode build"
-	@echo "	./build-rustfs.sh --sign                                # Sign binary files"
-	@echo "	./build-rustfs.sh --platform x86_64-unknown-linux-gnu   # Specify target platform"
-	@echo "	./build-rustfs.sh --skip-verification                   # Skip binary verification"
-	@echo ""
-
-.PHONY: help-docker
-help-docker: ## Shows docker environment and suggestion help
-	@echo ""
-	@echo "📋 Environment Variables:"
-	@echo "	REGISTRY                 Image registry address (required for push)"
-	@echo "	DOCKERHUB_USERNAME       Docker Hub username"
-	@echo "	DOCKERHUB_TOKEN          Docker Hub access token"
-	@echo "	GITHUB_TOKEN             GitHub access token"
-	@echo ""
-	@echo "💡 Suggestions:"
-	@echo "	Production use:          Use docker-buildx* commands (based on precompiled binaries)"
-	@echo "	Local development:       Use docker-dev* commands (build from source)"
-	@echo "	Development environment: Use dev-env-* commands to manage dev containers"
-	@echo ""
@@ -1,22 +0,0 @@
-## —— Code quality and Formatting ------------------------------------------------------------------
-
-.PHONY: fmt
-fmt: core-deps fmt-deps ## Format code
-	@echo "🔧 Formatting code..."
-	cargo fmt --all
-
-.PHONY: fmt-check
-fmt-check: core-deps fmt-deps ## Check code formatting
-	@echo "📝 Checking code formatting..."
-	cargo fmt --all --check
-
-.PHONY: clippy-check
-clippy-check: core-deps ## Run clippy checks
-	@echo "🔍 Running clippy checks..."
-	cargo clippy --fix --allow-dirty
-	cargo clippy --all-targets --all-features -- -D warnings
-
-.PHONY: compilation-check
-compilation-check: core-deps ## Run compilation check
-	@echo "🔨 Running compilation check..."
-	cargo check --all-targets
@@ -1,11 +0,0 @@
-## —— Pre Commit Checks ----------------------------------------------------------------------------
-
-.PHONY: setup-hooks
-setup-hooks: ## Set up git hooks
-	@echo "🔧 Setting up git hooks..."
-	chmod +x .git/hooks/pre-commit
-	@echo "✅ Git hooks setup complete!"
-
-.PHONY: pre-commit
-pre-commit: fmt clippy-check compilation-check test ## Run pre-commit checks
-	@echo "✅ All pre-commit checks passed!"
@@ -1,20 +0,0 @@
-## —— Tests and e2e test ---------------------------------------------------------------------------
-
-.PHONY: test
-test: core-deps test-deps ## Run all tests
-	@echo "🧪 Running tests..."
-	@if command -v cargo-nextest >/dev/null 2>&1; then \
-		cargo nextest run --all --exclude e2e_test; \
-	else \
-		echo "ℹ️ cargo-nextest not found; falling back to 'cargo test'"; \
-		cargo test --workspace --exclude e2e_test -- --nocapture; \
-	fi
-	cargo test --all --doc
-
-.PHONY: e2e-server
-e2e-server: ## Run e2e-server tests
-	sh $(shell pwd)/scripts/run.sh
-
-.PHONY: probe-e2e
-probe-e2e: ## Probe e2e tests
-	sh $(shell pwd)/scripts/probe.sh
@@ -1,261 +0,0 @@
-# RustFS Docker Images
-
-This directory contains Docker configuration files and supporting infrastructure for building and running RustFS container images.
-
-## 📁 Directory Structure
-
-```
-rustfs/
-├── Dockerfile           # Production image (Alpine + pre-built binaries)
-├── Dockerfile.source    # Development image (Debian + source build)
-├── docker-buildx.sh     # Multi-architecture build script
-├── Makefile             # Build automation with simplified commands
-└── .docker/             # Supporting infrastructure
-    ├── observability/   # Monitoring and observability configs
-    ├── compose/         # Docker Compose configurations
-    ├── mqtt/            # MQTT broker configs
-    └── openobserve-otel/ # OpenObserve + OpenTelemetry configs
-```
-
-## 🎯 Image Variants
-
-### Core Images
-
-| Image | Base OS | Build Method | Size | Use Case |
-|-------|---------|--------------|------|----------|
-| `production` (default) | Alpine 3.18 | GitHub Releases | Smallest | Production deployment |
-| `source` | Debian Bookworm | Source build | Medium | Custom builds with cross-compilation |
-| `dev` | Debian Bookworm | Development tools | Large | Interactive development |
-
-## 🚀 Usage Examples
-
-### Quick Start (Production)
-
-```bash
-# Default production image (Alpine + GitHub Releases)
-docker run -p 9000:9000 rustfs/rustfs:latest
-
-# Specific version
-docker run -p 9000:9000 rustfs/rustfs:1.2.3
-```
-
-### Complete Tag Strategy Examples
-
-```bash
-# Stable Releases
-docker run rustfs/rustfs:1.2.3           # Main version (production)
-docker run rustfs/rustfs:1.2.3-production # Explicit production variant
-docker run rustfs/rustfs:1.2.3-source   # Source build variant
-docker run rustfs/rustfs:latest          # Latest stable
-
-# Prerelease Versions
-docker run rustfs/rustfs:1.3.0-alpha.2  # Specific alpha version
-docker run rustfs/rustfs:alpha           # Latest alpha
-docker run rustfs/rustfs:beta            # Latest beta
-docker run rustfs/rustfs:rc              # Latest release candidate
-
-# Development Versions
-docker run rustfs/rustfs:dev             # Latest main branch development
-docker run rustfs/rustfs:dev-13e4a0b     # Specific commit
-docker run rustfs/rustfs:dev-latest      # Latest development
-docker run rustfs/rustfs:main-latest     # Main branch latest
-```
-
-### Development Environment
-
-```bash
-# Quick setup using Makefile (recommended)
-make docker-dev-local     # Build development image locally
-make dev-env-start        # Start development container
-
-# Manual Docker commands
-docker run -it -v $(pwd):/workspace -p 9000:9000 rustfs/rustfs:latest-dev
-
-# Build from source locally
-docker build -f Dockerfile.source -t rustfs:custom .
-
-# Development with hot reload
-docker-compose up rustfs-dev
-```
-
-## 🏗️ Build Arguments and Scripts
-
-### Using Makefile Commands (Recommended)
-
-The easiest way to build images using simplified commands:
-
-```bash
-# Development images (build from source)
-make docker-dev-local             # Build for local use (single arch)
-make docker-dev                   # Build multi-arch (for CI/CD)
-make docker-dev-push REGISTRY=xxx # Build and push to registry
-
-# Production images (using pre-built binaries)
-make docker-buildx                # Build multi-arch production images
-make docker-buildx-push           # Build and push production images
-make docker-buildx-version VERSION=v1.0.0  # Build specific version
-
-# Development environment
-make dev-env-start                # Start development container
-make dev-env-stop                 # Stop development container
-make dev-env-restart              # Restart development container
-
-# Help
-make help-docker                  # Show all Docker-related commands
-```
-
-### Using docker-buildx.sh (Advanced)
-
-For direct script usage and advanced scenarios:
-
-```bash
-# Build latest version for all architectures
-./docker-buildx.sh
-
-# Build and push to registry
-./docker-buildx.sh --push
-
-# Build specific version
-./docker-buildx.sh --release v1.2.3
-
-# Build and push specific version
-./docker-buildx.sh --release v1.2.3 --push
-```
-
-### Manual Docker Builds
-
-All images support dynamic version selection:
-
-```bash
-# Build production image with latest release
-docker build --build-arg RELEASE="latest" -t rustfs:latest .
-
-# Build from source with specific target
-docker build -f Dockerfile.source \
-  --build-arg TARGETPLATFORM="linux/amd64" \
-  -t rustfs:source .
-
-# Development build
-docker build -f Dockerfile.source -t rustfs:dev .
-```
-
-## 🔧 Binary Download Sources
-
-### Unified GitHub Releases
-
-The production image downloads from GitHub Releases for reliability and transparency:
-
- ✅ **production** → GitHub Releases API with automatic latest detection
- ✅ **Checksum verification** → SHA256SUMS validation when available
- ✅ **Multi-architecture** → Supports amd64 and arm64
-
-### Source Build
-
-The source variant compiles from source code with advanced features:
-
- 🔧 **Cross-compilation** → Supports multiple target platforms via `TARGETPLATFORM`
- ⚡ **Build caching** → sccache for faster compilation
- 🎯 **Optimized builds** → Release optimizations with LTO and symbol stripping
-
-## 📋 Architecture Support
-
-All variants support multi-architecture builds:
-
- **linux/amd64** (x86_64)
- **linux/arm64** (aarch64)
-
-Architecture is automatically detected during build using Docker's `TARGETARCH` build argument.
-
-## 🔐 Security Features
-
- **Checksum Verification**: Production image verifies SHA256SUMS when available
- **Non-root User**: All images run as user `rustfs` (UID 1000)
- **Minimal Runtime**: Production image only includes necessary dependencies
- **Secure Defaults**: No hardcoded credentials or keys
-
-## 🛠️ Development Workflow
-
-### Quick Start with Makefile (Recommended)
-
-```bash
-# 1. Start development environment
-make dev-env-start
-
-# 2. Your development container is now running with:
-#    - Port 9000 exposed for RustFS
-#    - Port 9010 exposed for admin console
-#    - Current directory mounted as /workspace
-
-# 3. Stop when done
-make dev-env-stop
-```
-
-### Manual Development Setup
-
-```bash
-# Build development image from source
-make docker-dev-local
-
-# Or use traditional Docker commands
-docker build -f Dockerfile.source -t rustfs:dev .
-
-# Run with development tools
-docker run -it -v $(pwd):/workspace -p 9000:9000 rustfs:dev bash
-
-# Or use docker-compose for complex setups
-docker-compose up rustfs-dev
-```
-
-### Common Development Tasks
-
-```bash
-# Build and test locally
-make build                        # Build binary natively
-make docker-dev-local            # Build development Docker image
-make test                        # Run tests
-make fmt                         # Format code
-make clippy                      # Run linter
-
-# Get help
-make help                        # General help
-make help-docker                 # Docker-specific help
-make help-build                  # Build-specific help
-```
-
-## 🚀 CI/CD Integration
-
-The project uses GitHub Actions for automated multi-architecture Docker builds:
-
-### Automated Builds
-
- **Tags**: Automatic builds triggered on version tags (e.g., `v1.2.3`)
- **Main Branch**: Development builds with `dev-latest` and `main-latest` tags
- **Pull Requests**: Test builds without registry push
-
-### Build Variants
-
-Each build creates three image variants:
-
- `rustfs/rustfs:v1.2.3` (production - Alpine-based)
- `rustfs/rustfs:v1.2.3-source` (source build - Debian-based)
- `rustfs/rustfs:v1.2.3-dev` (development - Debian-based with tools)
-
-### Manual Builds
-
-Trigger custom builds via GitHub Actions:
-
-```bash
-# Use workflow_dispatch to build specific versions
-# Available options: latest, main-latest, dev-latest, v1.2.3, dev-abc123
-```
-
-## 📦 Supporting Infrastructure
-
-The `.docker/` directory contains supporting configuration files:
-
- **observability/** - Prometheus, Grafana, OpenTelemetry configs
- **compose/** - Multi-service Docker Compose setups
- **mqtt/** - MQTT broker configurations
- **openobserve-otel/** - Log aggregation and tracing setup
-
-See individual README files in each subdirectory for specific usage instructions.
@@ -1,80 +0,0 @@
-# Docker Compose Configurations
-
-This directory contains specialized Docker Compose configurations for different use cases.
-
-## 📁 Configuration Files
-
-This directory contains specialized Docker Compose configurations and their associated Dockerfiles, keeping related files organized together.
-
-### Main Configuration (Root Directory)
-
- **`../../docker-compose.yml`** - **Default Production Setup**
-  - Complete production-ready configuration
-  - Includes RustFS server + full observability stack
-  - Supports multiple profiles: `dev`, `observability`, `cache`, `proxy`
-  - Recommended for most users
-
-### Specialized Configurations
-
- **`docker-compose.cluster.yaml`** - **Distributed Testing**
-  - 4-node cluster setup for testing distributed storage
-  - Uses local compiled binaries
-  - Simulates multi-node environment
-  - Ideal for development and cluster testing
-
- **`docker-compose.observability.yaml`** - **Observability Focus**
-  - Specialized setup for testing observability features
-  - Includes OpenTelemetry, Jaeger, Prometheus, Loki, Grafana
-  - Uses `../../Dockerfile.source` for builds
-  - Perfect for observability development
-
-## 🚀 Usage Examples
-
-### Production Setup
-
-```bash
-# Start main service
-docker-compose up -d
-
-# Start with development profile
-docker-compose --profile dev up -d
-
-# Start with full observability
-docker-compose --profile observability up -d
-```
-
-### Cluster Testing
-
-```bash
-# Build and start 4-node cluster (run from project root)
-cd .docker/compose
-docker-compose -f docker-compose.cluster.yaml up -d
-
-# Or run directly from project root
-docker-compose -f .docker/compose/docker-compose.cluster.yaml up -d
-```
-
-### Observability Testing
-
-```bash
-# Start observability-focused environment (run from project root)
-cd .docker/compose
-docker-compose -f docker-compose.observability.yaml up -d
-
-# Or run directly from project root
-docker-compose -f .docker/compose/docker-compose.observability.yaml up -d
-```
-
-## 🔧 Configuration Overview
-
-| Configuration | Nodes | Storage | Observability | Use Case |
-|---------------|-------|---------|---------------|----------|
-| **Main** | 1 | Volume mounts | Full stack | Production |
-| **Cluster** | 4 | HTTP endpoints | Basic | Testing |
-| **Observability** | 4 | Local data | Advanced | Development |
-
-## 📝 Notes
-
- Always ensure you have built the required binaries before starting cluster tests
- The main configuration is sufficient for most use cases
- Specialized configurations are for specific testing scenarios
@@ -1,82 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
-  node0:
-    image: rustfs/rustfs:latest # Replace with your image name and label
-    container_name: node0
-    hostname: node0
-    environment:
-      - RUSTFS_VOLUMES=http://node{0...3}:9000/data/rustfs{0...3}
-      - RUSTFS_ADDRESS=0.0.0.0:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_ACCESS_KEY=rustfsadmin
-      - RUSTFS_SECRET_KEY=rustfsadmin
-    platform: linux/amd64
-    ports:
-      - "9000:9000" # Map port 9001 of the host to port 9000 of the container
-    volumes:
-      - ../../target/x86_64-unknown-linux-gnu/release/rustfs:/app/rustfs
-    command: "/app/rustfs"
-
-  node1:
-    image: rustfs/rustfs:latest
-    container_name: node1
-    hostname: node1
-    environment:
-      - RUSTFS_VOLUMES=http://node{0...3}:9000/data/rustfs{0...3}
-      - RUSTFS_ADDRESS=0.0.0.0:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_ACCESS_KEY=rustfsadmin
-      - RUSTFS_SECRET_KEY=rustfsadmin
-    platform: linux/amd64
-    ports:
-      - "9001:9000" # Map port 9002 of the host to port 9000 of the container
-    volumes:
-      - ../../target/x86_64-unknown-linux-gnu/release/rustfs:/app/rustfs
-    command: "/app/rustfs"
-
-  node2:
-    image: rustfs/rustfs:latest
-    container_name: node2
-    hostname: node2
-    environment:
-      - RUSTFS_VOLUMES=http://node{0...3}:9000/data/rustfs{0...3}
-      - RUSTFS_ADDRESS=0.0.0.0:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_ACCESS_KEY=rustfsadmin
-      - RUSTFS_SECRET_KEY=rustfsadmin
-    platform: linux/amd64
-    ports:
-      - "9002:9000" # Map port 9003 of the host to port 9000 of the container
-    volumes:
-      - ../../target/x86_64-unknown-linux-gnu/release/rustfs:/app/rustfs
-    command: "/app/rustfs"
-
-  node3:
-    image: rustfs/rustfs:latest
-    container_name: node3
-    hostname: node3
-    environment:
-      - RUSTFS_VOLUMES=http://node{0...3}:9000/data/rustfs{0...3}
-      - RUSTFS_ADDRESS=0.0.0.0:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_ACCESS_KEY=rustfsadmin
-      - RUSTFS_SECRET_KEY=rustfsadmin
-    platform: linux/amd64
-    ports:
-      - "9003:9000" # Map port 9004 of the host to port 9000 of the container
-    volumes:
-      - ../../target/x86_64-unknown-linux-gnu/release/rustfs:/app/rustfs
-    command: "/app/rustfs"
@@ -1,149 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
-  otel-collector:
-    image: otel/opentelemetry-collector-contrib:0.129.1
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ../../.docker/observability/otel-collector-config.yaml:/etc/otelcol-contrib/config.yaml
-    ports:
-      - 1888:1888
-      - 8888:8888
-      - 8889:8889
-      - 13133:13133
-      - 4317:4317
-      - 4318:4318
-      - 55679:55679
-    networks:
-      - rustfs-network
-  jaeger:
-    image: jaegertracing/jaeger:2.8.0
-    environment:
-      - TZ=Asia/Shanghai
-    ports:
-      - "16686:16686"
-      - "14317:4317"
-      - "14318:4318"
-    networks:
-      - rustfs-network
-  prometheus:
-    image: prom/prometheus:v3.4.2
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ../../.docker/observability/prometheus.yml:/etc/prometheus/prometheus.yml
-    ports:
-      - "9090:9090"
-    networks:
-      - rustfs-network
-  loki:
-    image: grafana/loki:3.5.1
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ../../.docker/observability/loki-config.yaml:/etc/loki/local-config.yaml
-    ports:
-      - "3100:3100"
-    command: -config.file=/etc/loki/local-config.yaml
-    networks:
-      - rustfs-network
-  grafana:
-    image: grafana/grafana:12.0.2
-    ports:
-      - "3000:3000" # Web UI
-    environment:
-      - GF_SECURITY_ADMIN_PASSWORD=admin
-      - TZ=Asia/Shanghai
-    networks:
-      - rustfs-network
-    volumes:
-      - ../../.docker/observability/grafana/provisioning:/etc/grafana/provisioning:ro
-      - ../../.docker/observability/grafana/dashboards:/var/lib/grafana/dashboards:ro
-
-  node1:
-    build:
-      context: ../..
-      dockerfile: Dockerfile.source
-    container_name: node1
-    environment:
-      - RUSTFS_VOLUMES=http://node{1...4}:9000/root/data/target/volume/test{1...4}
-      - RUSTFS_ADDRESS=:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_OBS_ENDPOINT=http://otel-collector:4318
-      - RUSTFS_OBS_LOGGER_LEVEL=debug
-    platform: linux/amd64
-    ports:
-      - "9001:9000" # Map port 9001 of the host to port 9000 of the container
-    networks:
-      - rustfs-network
-
-  node2:
-    build:
-      context: ../..
-      dockerfile: Dockerfile.source
-    container_name: node2
-    environment:
-      - RUSTFS_VOLUMES=http://node{1...4}:9000/root/data/target/volume/test{1...4}
-      - RUSTFS_ADDRESS=:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_OBS_ENDPOINT=http://otel-collector:4318
-      - RUSTFS_OBS_LOGGER_LEVEL=debug
-    platform: linux/amd64
-    ports:
-      - "9002:9000" # Map port 9002 of the host to port 9000 of the container
-    networks:
-      - rustfs-network
-
-  node3:
-    build:
-      context: ../..
-      dockerfile: Dockerfile.source
-    container_name: node3
-    environment:
-      - RUSTFS_VOLUMES=http://node{1...4}:9000/root/data/target/volume/test{1...4}
-      - RUSTFS_ADDRESS=:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_OBS_ENDPOINT=http://otel-collector:4318
-      - RUSTFS_OBS_LOGGER_LEVEL=debug
-    platform: linux/amd64
-    ports:
-      - "9003:9000" # Map port 9003 of the host to port 9000 of the container
-    networks:
-      - rustfs-network
-
-  node4:
-    build:
-      context: ../..
-      dockerfile: Dockerfile.source
-    container_name: node4
-    environment:
-      - RUSTFS_VOLUMES=http://node{1...4}:9000/root/data/target/volume/test{1...4}
-      - RUSTFS_ADDRESS=:9000
-      - RUSTFS_CONSOLE_ENABLE=true
-      - RUSTFS_OBS_ENDPOINT=http://otel-collector:4318
-      - RUSTFS_OBS_LOGGER_LEVEL=debug
-    platform: linux/amd64
-    ports:
-      - "9004:9000" # Map port 9004 of the host to port 9000 of the container
-    networks:
-      - rustfs-network
-
-networks:
-  rustfs-network:
-    driver: bridge
-    name: "network_rustfs_config"
-    driver_opts:
-      com.docker.network.enable_ipv6: "true"
@@ -1,37 +0,0 @@
-# 节点配置
-node.name = "emqx@127.0.0.1"
-node.cookie = "aBcDeFgHiJkLmNoPqRsTuVwXyZ012345"
-node.data_dir = "/opt/emqx/data"
-
-# 日志配置
-log.console = {level = info, enable = true}
-log.file = {path = "/opt/emqx/log/emqx.log", enable = true, level = info}
-
-# MQTT TCP 监听器
-listeners.tcp.default = {bind = "0.0.0.0:1883", max_connections = 1000000, enable = true}
-
-# MQTT SSL 监听器
-listeners.ssl.default = {bind = "0.0.0.0:8883", enable = false}
-
-# MQTT WebSocket 监听器
-listeners.ws.default = {bind = "0.0.0.0:8083", enable = true}
-
-# MQTT WebSocket SSL 监听器
-listeners.wss.default = {bind = "0.0.0.0:8084", enable = false}
-
-# 管理控制台
-dashboard.listeners.http = {bind = "0.0.0.0:18083", enable = true}
-
-# HTTP API
-management.listeners.http = {bind = "0.0.0.0:8081", enable = true}
-
-# 认证配置
-authentication = [
-  {enable = true, mechanism = password_based, backend = built_in_database, user_id_type = username}
-]
-
-# 授权配置
-authorization.sources = [{type = built_in_database, enable = true}]
-
-# 持久化消息存储
-message.storage.backend = built_in_database
@@ -1,9 +0,0 @@
-name emqx@127.0.0.1
-setcookie aBcDeFgHiJkLmNoPqRsTuVwXyZ012345
-+P 2097152
-+t 1048576
-+zdbbl 32768
-kernel inet_dist_listen_min 6000
-kernel inet_dist_listen_max 6100
-smp enable
-mnesia dir "/opt/emqx/data/mnesia"
@@ -1,74 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
-  emqx:
-    image: emqx/emqx:latest
-    container_name: emqx
-    restart: unless-stopped
-    environment:
-      - EMQX_NODE__NAME=emqx@127.0.0.1
-      - EMQX_NODE__COOKIE=aBcDeFgHiJkLmNoPqRsTuVwXyZ012345
-      - EMQX_NODE__DATA_DIR=/opt/emqx/data
-      - EMQX_LOG__CONSOLE__LEVEL=info
-      - EMQX_LOG__CONSOLE__ENABLE=true
-      - EMQX_LOG__FILE__PATH=/opt/emqx/log/emqx.log
-      - EMQX_LOG__FILE__LEVEL=info
-      - EMQX_LOG__FILE__ENABLE=true
-      - EMQX_LISTENERS__TCP__DEFAULT__BIND=0.0.0.0:1883
-      - EMQX_LISTENERS__TCP__DEFAULT__MAX_CONNECTIONS=1000000
-      - EMQX_LISTENERS__TCP__DEFAULT__ENABLE=true
-      - EMQX_LISTENERS__SSL__DEFAULT__BIND=0.0.0.0:8883
-      - EMQX_LISTENERS__SSL__DEFAULT__ENABLE=false
-      - EMQX_LISTENERS__WS__DEFAULT__BIND=0.0.0.0:8083
-      - EMQX_LISTENERS__WS__DEFAULT__ENABLE=true
-      - EMQX_LISTENERS__WSS__DEFAULT__BIND=0.0.0.0:8084
-      - EMQX_LISTENERS__WSS__DEFAULT__ENABLE=false
-      - EMQX_DASHBOARD__LISTENERS__HTTP__BIND=0.0.0.0:18083
-      - EMQX_DASHBOARD__LISTENERS__HTTP__ENABLE=true
-      - EMQX_MANAGEMENT__LISTENERS__HTTP__BIND=0.0.0.0:8081
-      - EMQX_MANAGEMENT__LISTENERS__HTTP__ENABLE=true
-      - EMQX_AUTHENTICATION__1__ENABLE=true
-      - EMQX_AUTHENTICATION__1__MECHANISM=password_based
-      - EMQX_AUTHENTICATION__1__BACKEND=built_in_database
-      - EMQX_AUTHENTICATION__1__USER_ID_TYPE=username
-      - EMQX_AUTHORIZATION__SOURCES__1__TYPE=built_in_database
-      - EMQX_AUTHORIZATION__SOURCES__1__ENABLE=true
-    ports:
-      - "1883:1883"    # MQTT TCP
-      - "8883:8883"    # MQTT SSL
-      - "8083:8083"    # MQTT WebSocket
-      - "8084:8084"    # MQTT WebSocket SSL
-      - "18083:18083"  # Web 管理控制台
-      - "8081:8081"    # HTTP API
-    volumes:
-      - ./data:/opt/emqx/data
-      - ./log:/opt/emqx/log
-      - ./config:/opt/emqx/etc
-    networks:
-      - mqtt-net
-    healthcheck:
-      test: [ "CMD", "/opt/emqx/bin/emqx_ctl", "status" ]
-      interval: 30s
-      timeout: 10s
-      retries: 3
-    logging:
-      driver: "json-file"
-      options:
-        max-size: "100m"
-        max-file: "3"
-
-networks:
-  mqtt-net:
-    driver: bridge
@@ -1,29 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
-  emqx:
-    image: emqx/emqx:latest
-    container_name: emqx
-    ports:
-      - "1883:1883"
-      - "8083:8083"
-      - "8084:8084"
-      - "8883:8883"
-      - "18083:18083"
-    restart: unless-stopped
-
-networks:
-  default:
-    driver: bridge
@@ -1,109 +0,0 @@
-# Observability
-
-This directory contains the observability stack for the application. The stack is composed of the following components:
-
- Prometheus v3.2.1
- Grafana 11.6.0
- Loki 3.4.2
- Jaeger 2.4.0
- Otel Collector 0.120.0 # 0.121.0 remove loki
-
-## Prometheus
-
-Prometheus is a monitoring and alerting toolkit. It scrapes metrics from instrumented jobs, either directly or via an
-intermediary push gateway for short-lived jobs. It stores all scraped samples locally and runs rules over this data to
-either aggregate and record new time series from existing data or generate alerts. Grafana or other API consumers can be
-used to visualize the collected data.
-
-## Grafana
-
-Grafana is a multi-platform open-source analytics and interactive visualization web application. It provides charts,
-graphs, and alerts for the web when connected to supported data sources.
-
-## Loki
-
-Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is
-designed to be very cost-effective and easy to operate. It does not index the contents of the logs, but rather a set of
-labels for each log stream.
-
-## Jaeger
-
-Jaeger is a distributed tracing system released as open source by Uber Technologies. It is used for monitoring and
-troubleshooting microservices-based distributed systems, including:
-
- Distributed context propagation
- Distributed transaction monitoring
- Root cause analysis
- Service dependency analysis
- Performance / latency optimization
-
-## Otel Collector
-
-The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process, and export telemetry
-data. It removes the need to run, operate, and maintain multiple agents/collectors in order to support open-source
-observability data formats (e.g. Jaeger, Prometheus, etc.) sending to one or more open-source or commercial back-ends.
-
-## How to use
-
-To deploy the observability stack, run the following command:
-
- docker latest version
-
-```bash
-docker compose -f docker-compose.yml -f docker-compose.override.yml up -d
-```
-
- docker compose v2.0.0 or before
-
-```bash
-docker-compose -f docker-compose.yml -f docker-compose.override.yml up -d
-```
-
-To access the Grafana dashboard, navigate to `http://localhost:3000` in your browser. The default username and password
-are `admin` and `admin`, respectively.
-
-To access the Jaeger dashboard, navigate to `http://localhost:16686` in your browser.
-
-To access the Prometheus dashboard, navigate to `http://localhost:9090` in your browser.
-
-## How to stop
-
-To stop the observability stack, run the following command:
-
-```bash
-docker compose -f docker-compose.yml -f docker-compose.override.yml down
-```
-
-## How to remove data
-
-To remove the data generated by the observability stack, run the following command:
-
-```bash
-docker compose -f docker-compose.yml -f docker-compose.override.yml down -v
-```
-
-## How to configure
-
-To configure the observability stack, modify the `docker-compose.override.yml` file. The file contains the following
-
-```yaml
-services:
-  prometheus:
-    environment:
-      - PROMETHEUS_CONFIG_FILE=/etc/prometheus/prometheus.yml
-    volumes:
-      - ./prometheus.yml:/etc/prometheus/prometheus.yml
-
-  grafana:
-    environment:
-      - GF_SECURITY_ADMIN_PASSWORD=admin
-    volumes:
-      - ./grafana/provisioning:/etc/grafana/provisioning
-```
-
-The `prometheus` service mounts the `prometheus.yml` file to `/etc/prometheus/prometheus.yml`. The `grafana` service
-mounts the `grafana/provisioning` directory to `/etc/grafana/provisioning`. You can modify these files to configure the
-observability stack.
-
-
-
@@ -1,27 +0,0 @@
-## 部署可观测性系统
-
-OpenTelemetry Collector 提供了一个厂商中立的遥测数据处理方案，用于接收、处理和导出遥测数据。它消除了为支持多种开源可观测性数据格式（如
-Jaeger、Prometheus 等）而需要运行和维护多个代理/收集器的必要性。
-
-### 快速部署
-
-1. 进入 `.docker/observability` 目录
-2. 执行以下命令启动服务：
-
-```bash
-docker compose -f docker-compose.yml  up -d
-```
-
-### 访问监控面板
-
-服务启动后，可通过以下地址访问各个监控面板：
-
- Grafana: `http://localhost:3000` (默认账号/密码：`admin`/`admin`)
- Jaeger: `http://localhost:16686`
- Prometheus: `http://localhost:9090`
-
-## 配置可观测性
-
-```shell
-export RUSTFS_OBS_ENDPOINT="http://localhost:4317" # OpenTelemetry Collector 地址
-```
@@ -1,178 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
-
-  tempo-init:
-    image: busybox:latest
-    command: [ "sh", "-c", "chown -R 10001:10001 /var/tempo" ]
-    volumes:
-      - ./tempo-data:/var/tempo
-    user: root
-    networks:
-      - otel-network
-    restart: "no"
-
-  tempo:
-    image: grafana/tempo:latest
-    user: "10001" # The container must be started with root to execute chown in the script
-    command: [ "-config.file=/etc/tempo.yaml" ] # This is passed as a parameter to the entry point script
-    volumes:
-      - ./tempo.yaml:/etc/tempo.yaml:ro
-      - ./tempo-data:/var/tempo
-    ports:
-      - "3200:3200" # tempo
-      - "24317:4317" # otlp grpc
-      - "24318:4318" # otlp http
-    restart: unless-stopped
-    networks:
-      - otel-network
-    healthcheck:
-      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:3200/metrics" ]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-      start_period: 15s
-
-  otel-collector:
-    image: otel/opentelemetry-collector-contrib:latest
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ./otel-collector-config.yaml:/etc/otelcol-contrib/config.yaml:ro
-    ports:
-      - "1888:1888" # pprof
-      - "8888:8888" # Prometheus metrics for Collector
-      - "8889:8889" # Prometheus metrics for application indicators
-      - "13133:13133" # health check
-      - "4317:4317" # OTLP gRPC
-      - "4318:4318" # OTLP HTTP
-      - "55679:55679" # zpages
-    networks:
-      - otel-network
-    depends_on:
-      jaeger:
-        condition: service_started
-      tempo:
-        condition: service_started
-      prometheus:
-        condition: service_started
-      loki:
-        condition: service_started
-    healthcheck:
-      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:13133" ]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-
-  jaeger:
-    image: jaegertracing/jaeger:latest
-    environment:
-      - TZ=Asia/Shanghai
-      - SPAN_STORAGE_TYPE=memory
-      - COLLECTOR_OTLP_ENABLED=true
-    ports:
-      - "16686:16686" # Web UI
-      - "14317:4317" # OTLP gRPC
-      - "14318:4318" # OTLP HTTP
-      - "18888:8888" # collector
-    networks:
-      - otel-network
-    healthcheck:
-      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:16686" ]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-  prometheus:
-    image: prom/prometheus:latest
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ./prometheus.yml:/etc/prometheus/prometheus.yml:ro
-      - ./prometheus-data:/prometheus
-    ports:
-      - "9090:9090"
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--web.enable-otlp-receiver' # Enable OTLP
-      - '--web.enable-remote-write-receiver' # Enable remote write
-      - '--enable-feature=promql-experimental-functions' # Enable info()
-      - '--storage.tsdb.min-block-duration=15m' # Minimum block duration
-      - '--storage.tsdb.max-block-duration=1h'  # Maximum block duration
-      - '--log.level=info'
-      - '--storage.tsdb.retention.time=30d'
-      - '--storage.tsdb.path=/prometheus'
-      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
-      - '--web.console.templates=/usr/share/prometheus/consoles'
-    restart: unless-stopped
-    networks:
-      - otel-network
-    healthcheck:
-      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:9090/-/healthy" ]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-  loki:
-    image: grafana/loki:latest
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ./loki-config.yaml:/etc/loki/local-config.yaml:ro
-    ports:
-      - "3100:3100"
-    command: -config.file=/etc/loki/local-config.yaml
-    networks:
-      - otel-network
-    healthcheck:
-      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:3100/ready" ]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-  grafana:
-    image: grafana/grafana:latest
-    ports:
-      - "3000:3000"  # Web UI
-    volumes:
-      - ./grafana-datasources.yaml:/etc/grafana/provisioning/datasources/datasources.yaml
-    environment:
-      - GF_SECURITY_ADMIN_PASSWORD=admin
-      - GF_SECURITY_ADMIN_USER=admin
-      - TZ=Asia/Shanghai
-      - GF_INSTALL_PLUGINS=grafana-pyroscope-datasource
-    restart: unless-stopped
-    networks:
-      - otel-network
-    depends_on:
-      - prometheus
-      - tempo
-      - loki
-    healthcheck:
-      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:3000/api/health" ]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-
-volumes:
-  prometheus-data:
-  tempo-data:
-
-networks:
-  otel-network:
-    driver: bridge
-    name: "network_otel_config"
-    ipam:
-      config:
-        - subnet: 172.28.0.0/16
-    driver_opts:
-      com.docker.network.enable_ipv6: "true"
@@ -1,108 +0,0 @@
-apiVersion: 1
-
-datasources:
-  - name: Prometheus
-    type: prometheus
-    uid: prometheus
-    access: proxy
-    orgId: 1
-    url: http://prometheus:9090
-    basicAuth: false
-    isDefault: false
-    version: 1
-    editable: false
-    jsonData:
-      httpMethod: GET
-  - name: Tempo
-    type: tempo
-    access: proxy
-    orgId: 1
-    url: http://tempo:3200
-    basicAuth: false
-    isDefault: true
-    version: 1
-    editable: false
-    apiVersion: 1
-    uid: tempo
-    jsonData:
-      httpMethod: GET
-      serviceMap:
-        datasourceUid: prometheus
-      streamingEnabled:
-        search: true
-      tracesToLogsV2:
-        # Field with an internal link pointing to a logs data source in Grafana.
-        # datasourceUid value must match the uid value of the logs data source.
-        datasourceUid: 'loki'
-        spanStartTimeShift: '-1h'
-        spanEndTimeShift: '1h'
-        tags: [ 'job', 'instance', 'pod', 'namespace' ]
-        filterByTraceID: false
-        filterBySpanID: false
-        customQuery: true
-        query: 'method="$${__span.tags.method}"'
-        tracesToMetrics:
-          datasourceUid: 'prometheus'
-          spanStartTimeShift: '-1h'
-          spanEndTimeShift: '1h'
-          tags: [ { key: 'service.name', value: 'service' }, { key: 'job' } ]
-          queries:
-            - name: 'Sample query'
-              query: 'sum(rate(traces_spanmetrics_latency_bucket{$$__tags}[5m]))'
-        tracesToProfiles:
-          datasourceUid: 'grafana-pyroscope-datasource'
-          tags: [ 'job', 'instance', 'pod', 'namespace' ]
-          profileTypeId: 'process_cpu:cpu:nanoseconds:cpu:nanoseconds'
-          customQuery: true
-          query: 'method="$${__span.tags.method}"'
-        serviceMap:
-          datasourceUid: 'prometheus'
-        nodeGraph:
-          enabled: true
-        search:
-          hide: false
-        traceQuery:
-          timeShiftEnabled: true
-          spanStartTimeShift: '-1h'
-          spanEndTimeShift: '1h'
-        spanBar:
-          type: 'Tag'
-          tag: 'http.path'
-        streamingEnabled:
-          search: true
-  - name: Jaeger
-    type: jaeger
-    uid: Jaeger
-    url: http://jaeger:16686
-    basicAuth: false
-    access: proxy
-    readOnly: false
-    isDefault: false
-    jsonData:
-      tracesToLogsV2:
-        # Field with an internal link pointing to a logs data source in Grafana.
-        # datasourceUid value must match the uid value of the logs data source.
-        datasourceUid: 'loki'
-        spanStartTimeShift: '1h'
-        spanEndTimeShift: '-1h'
-        tags: [ 'job', 'instance', 'pod', 'namespace' ]
-        filterByTraceID: false
-        filterBySpanID: false
-        customQuery: true
-        query: 'method="$${__span.tags.method}"'
-      tracesToMetrics:
-        datasourceUid: 'Prometheus'
-        spanStartTimeShift: '1h'
-        spanEndTimeShift: '-1h'
-        tags: [ { key: 'service.name', value: 'service' }, { key: 'job' } ]
-        queries:
-          - name: 'Sample query'
-            query: 'sum(rate(traces_spanmetrics_latency_bucket{$$__tags}[5m]))'
-      nodeGraph:
-        enabled: true
-      traceQuery:
-        timeShiftEnabled: true
-        spanStartTimeShift: '1h'
-        spanEndTimeShift: '-1h'
-      spanBar:
-        type: 'None'
@@ -1,114 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-service:
-  extensions: [ jaeger_storage, jaeger_query, remote_sampling, healthcheckv2 ]
-  pipelines:
-    traces:
-      receivers: [ otlp, jaeger, zipkin ]
-      processors: [ batch, adaptive_sampling ]
-      exporters: [ jaeger_storage_exporter ]
-  telemetry:
-    resource:
-      service.name: jaeger
-    metrics:
-      level: detailed
-      readers:
-        - pull:
-            exporter:
-              prometheus:
-                host: 0.0.0.0
-                port: 8888
-    logs:
-      level: debug
-    # TODO Initialize telemetry tracer once OTEL released new feature.
-    # https://github.com/open-telemetry/opentelemetry-collector/issues/10663
-
-extensions:
-  healthcheckv2:
-    use_v2: true
-    http:
-
-  # pprof:
-  #   endpoint: 0.0.0.0:1777
-  # zpages:
-  #   endpoint: 0.0.0.0:55679
-
-  jaeger_query:
-    storage:
-      traces: some_store
-      traces_archive: another_store
-    ui:
-      config_file: ./cmd/jaeger/config-ui.json
-      log_access: true
-    # The maximum duration that is considered for clock skew adjustments.
-    # Defaults to 0 seconds, which means it's disabled.
-    max_clock_skew_adjust: 0s
-    grpc:
-      endpoint: 0.0.0.0:16685
-    http:
-      endpoint: 0.0.0.0:16686
-
-  jaeger_storage:
-    backends:
-      some_store:
-        memory:
-          max_traces: 1000000
-          max_events: 100000
-      another_store:
-        memory:
-          max_traces: 1000000
-    metric_backends:
-      some_metrics_storage:
-        prometheus:
-          endpoint: http://prometheus:9090
-          normalize_calls: true
-          normalize_duration: true
-
-  remote_sampling:
-    # You can either use file or adaptive sampling strategy in remote_sampling
-    # file:
-    #   path: ./cmd/jaeger/sampling-strategies.json
-    adaptive:
-      sampling_store: some_store
-      initial_sampling_probability: 0.1
-    http:
-    grpc:
-
-receivers:
-  otlp:
-    protocols:
-      grpc:
-      http:
-
-  jaeger:
-    protocols:
-      grpc:
-      thrift_binary:
-      thrift_compact:
-      thrift_http:
-
-  zipkin:
-
-processors:
-  batch:
-  metadata_keys: [ "span.kind", "http.method", "http.status_code", "db.system", "db.statement", "messaging.system", "messaging.destination", "messaging.operation","span.events","span.links" ]
-  # Adaptive Sampling Processor is required to support adaptive sampling.
-  # It expects remote_sampling extension with `adaptive:` config to be enabled.
-  adaptive_sampling:
-
-exporters:
-  jaeger_storage_exporter:
-    trace_storage: some_store
-
@@ -1,82 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-auth_enabled: false
-
-server:
-  http_listen_port: 3100
-  grpc_listen_port: 9096
-  log_level: debug
-  grpc_server_max_concurrent_streams: 1000
-
-common:
-  instance_addr: 127.0.0.1
-  path_prefix: /tmp/loki
-  storage:
-    filesystem:
-      chunks_directory: /tmp/loki/chunks
-      rules_directory: /tmp/loki/rules
-  replication_factor: 1
-  ring:
-    kvstore:
-      store: inmemory
-
-query_range:
-  results_cache:
-    cache:
-      embedded_cache:
-        enabled: true
-        max_size_mb: 100
-
-limits_config:
-  metric_aggregation_enabled: true
-  max_line_size: 256KB
-  max_line_size_truncate: false
-  allow_structured_metadata: true
-
-schema_config:
-  configs:
-    - from: 2020-10-24
-      store: tsdb
-      object_store: filesystem
-      schema: v13
-      index:
-        prefix: index_
-        period: 24h
-      row_shards: 16
-
-pattern_ingester:
-  enabled: true
-  metric_aggregation:
-    loki_address: localhost:3100
-
-ruler:
-  alertmanager_url: http://localhost:9093
-
-frontend:
-  encoding: protobuf
-
-
-# By default, Loki will send anonymous, but uniquely-identifiable usage and configuration
-# analytics to Grafana Labs. These statistics are sent to https://stats.grafana.org/
-#
-# Statistics help us better understand how Loki is used, and they show us performance
-# levels for most users. This helps us prioritize features and documentation.
-# For more information on what's sent, look at
-# https://github.com/grafana/loki/blob/main/pkg/analytics/stats.go
-# Refer to the buildReport method to see what goes into a report.
-#
-# If you would like to disable reporting, uncomment the following lines:
-#analytics:
-#  reporting_enabled: false
@@ -1,121 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-receivers:
-  otlp:
-    protocols:
-      grpc: # OTLP gRPC receiver
-        endpoint: 0.0.0.0:4317
-      http: # OTLP HTTP receiver
-        endpoint: 0.0.0.0:4318
-
-processors:
-  batch: # Batch processor to improve throughput
-    timeout: 5s
-    send_batch_size: 1000
-    metadata_keys: [ ]
-    metadata_cardinality_limit: 1000
-  memory_limiter:
-    check_interval: 1s
-    limit_mib: 512
-  transform/logs:
-    log_statements:
-      - context: log
-        statements:
-          # Extract Body as attribute "message"
-          - set(attributes["message"], body.string)
-          # Retain the original Body
-          - set(attributes["log.body"], body.string)
-
-exporters:
-  otlp/traces: # OTLP exporter for trace data
-    endpoint: "http://jaeger:4317"  # OTLP gRPC endpoint for Jaeger
-    tls:
-      insecure: true  # TLS is disabled in the development environment and a certificate needs to be configured in the production environment.
-    compression: gzip  # Enable compression to reduce network bandwidth
-    retry_on_failure:
-      enabled: true  # Enable retry on failure
-      initial_interval: 1s  # Initial interval for retry
-      max_interval: 30s  # Maximum interval for retry
-      max_elapsed_time: 300s  # Maximum elapsed time for retry
-    sending_queue:
-      enabled: true  # Enable sending queue
-      num_consumers: 10  # Number of consumers
-      queue_size: 5000  # Queue size
-  otlp/tempo: # OTLP exporter for trace data
-    endpoint: "http://tempo:4317"  # OTLP gRPC endpoint for tempo
-    tls:
-      insecure: true  # TLS is disabled in the development environment and a certificate needs to be configured in the production environment.
-    compression: gzip  # Enable compression to reduce network bandwidth
-    retry_on_failure:
-      enabled: true  # Enable retry on failure
-      initial_interval: 1s  # Initial interval for retry
-      max_interval: 30s  # Maximum interval for retry
-      max_elapsed_time: 300s  # Maximum elapsed time for retry
-    sending_queue:
-      enabled: true  # Enable sending queue
-      num_consumers: 10  # Number of consumers
-      queue_size: 5000  # Queue size
-  prometheus: # Prometheus exporter for metrics data
-    endpoint: "0.0.0.0:8889"  # Prometheus scraping endpoint
-    send_timestamps: true  # Send timestamp
-    metric_expiration: 5m  # Metric expiration time
-    resource_to_telemetry_conversion:
-      enabled: true  # Enable resource to telemetry conversion
-  otlphttp/loki: # Loki exporter for log data
-    endpoint: "http://loki:3100/otlp"
-    tls:
-      insecure: true
-    compression: gzip  # Enable compression to reduce network bandwidth
-extensions:
-  health_check:
-    endpoint: 0.0.0.0:13133
-  pprof:
-    endpoint: 0.0.0.0:1888
-  zpages:
-    endpoint: 0.0.0.0:55679
-service:
-  extensions: [ health_check, pprof, zpages ]  # Enable extension
-  pipelines:
-    traces:
-      receivers: [ otlp ]
-      processors: [ memory_limiter, batch ]
-      exporters: [ otlp/traces, otlp/tempo ]
-    metrics:
-      receivers: [ otlp ]
-      processors: [ batch ]
-      exporters: [ prometheus ]
-    logs:
-      receivers: [ otlp ]
-      processors: [ batch, transform/logs ]
-      exporters: [ otlphttp/loki ]
-  telemetry:
-    logs:
-      level: "debug"  # Collector log level
-      encoding: "json"  # Log encoding: console or json
-    metrics:
-      level: "detailed" # Can be basic, normal, detailed
-      readers:
-        - periodic:
-            exporter:
-              otlp:
-                protocol: http/protobuf
-                endpoint: http://otel-collector:4318
-        - pull:
-            exporter:
-              prometheus:
-                host: '0.0.0.0'
-                port: 8888
-
-
@@ -1 +0,0 @@
-*
@@ -1,65 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-global:
-  scrape_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute.
-  evaluation_interval: 15s
-  external_labels:
-    cluster: 'rustfs-dev'  # Label to identify the cluster
-    relica: '1'  # Replica identifier
-
-scrape_configs:
-  - job_name: 'otel-collector-internal'
-    static_configs:
-      - targets: [ 'otel-collector:8888' ]  # Scrape metrics from Collector
-    scrape_interval: 10s
-  - job_name: 'rustfs-app-metrics'
-    static_configs:
-      - targets: [ 'otel-collector:8889' ]  # Application indicators
-    scrape_interval: 15s
-    metric_relabel_configs:
-  - job_name: 'tempo'
-    static_configs:
-      - targets: [ 'tempo:3200' ]  # Scrape metrics from Tempo
-  - job_name: 'jaeger'
-    static_configs:
-      - targets: [ 'jaeger:8888' ]  # Jaeger admin port
-
-otlp:
-  # Recommended attributes to be promoted to labels.
-  promote_resource_attributes:
-    - service.instance.id
-    - service.name
-    - service.namespace
-    - cloud.availability_zone
-    - cloud.region
-    - container.name
-    - deployment.environment.name
-    - k8s.cluster.name
-    - k8s.container.name
-    - k8s.cronjob.name
-    - k8s.daemonset.name
-    - k8s.deployment.name
-    - k8s.job.name
-    - k8s.namespace.name
-    - k8s.pod.name
-    - k8s.replicaset.name
-    - k8s.statefulset.name
-  # Ingest OTLP data keeping all characters in metric/label names.
-  translation_strategy: NoUTF8EscapingWithSuffixes
-
-storage:
-  # OTLP is a push-based protocol, Out of order samples is a common scenario.
-  tsdb:
-    out_of_order_time_window: 30m
@@ -1 +0,0 @@
-*
@@ -1,57 +0,0 @@
-stream_over_http_enabled: true
-server:
-  http_listen_port: 3200
-  log_level: info
-
-query_frontend:
-  search:
-    duration_slo: 5s
-    throughput_bytes_slo: 1.073741824e+09
-    metadata_slo:
-      duration_slo: 5s
-      throughput_bytes_slo: 1.073741824e+09
-  trace_by_id:
-    duration_slo: 5s
-
-distributor:
-  receivers:
-    otlp:
-      protocols:
-        grpc:
-          endpoint: "0.0.0.0:4317"
-        http:
-          endpoint: "0.0.0.0:4318"
-
-ingester:
-  max_block_duration: 5m # cut the headblock when this much time passes. this is being set for demo purposes and should probably be left alone normally
-
-compactor:
-  compaction:
-    block_retention: 1h # overall Tempo trace retention. set for demo purposes
-
-metrics_generator:
-  registry:
-    external_labels:
-      source: tempo
-      cluster: docker-compose
-  storage:
-    path: /var/tempo/generator/wal
-    remote_write:
-      - url: http://prometheus:9090/api/v1/write
-        send_exemplars: true
-  traces_storage:
-    path: /var/tempo/generator/traces
-
-storage:
-  trace:
-    backend: local # backend configuration to use
-    wal:
-      path: /var/tempo/wal # where to store the wal locally
-    local:
-      path: /var/tempo/blocks
-
-overrides:
-  defaults:
-    metrics_generator:
-      processors: [ service-graphs, span-metrics, local-blocks ] # enables metrics generator
-      generate_native_histograms: both
@@ -1,75 +0,0 @@
-# OpenObserve + OpenTelemetry Collector
-
-[![OpenObserve](https://img.shields.io/badge/OpenObserve-OpenSource-blue.svg)](https://openobserve.org)
-[![OpenTelemetry](https://img.shields.io/badge/OpenTelemetry-Collector-green.svg)](https://opentelemetry.io/)
-
-English | [中文](README_ZH.md)
-
-This directory contains the configuration files for setting up an observability stack with OpenObserve and OpenTelemetry
-Collector.
-
-### Overview
-
-This setup provides a complete observability solution for your applications:
-
- **OpenObserve**: A modern, open-source observability platform for logs, metrics, and traces.
- **OpenTelemetry Collector**: Collects and processes telemetry data before sending it to OpenObserve.
-
-### Setup Instructions
-
-1. **Prerequisites**:
-    - Docker and Docker Compose installed
-    - Sufficient memory resources (minimum 2GB recommended)
-
-2. **Starting the Services**:
-   ```bash
-   cd .docker/openobserve-otel
-   docker compose -f docker-compose.yml  up -d
-   ```
-
-3. **Accessing the Dashboard**:
-    - OpenObserve UI: http://localhost:5080
-    - Default credentials:
-        - Username: root@rustfs.com
-        - Password: rustfs123
-
-### Configuration
-
-#### OpenObserve Configuration
-
-The OpenObserve service is configured with:
-
- Root user credentials
- Data persistence through a volume mount
- Memory cache enabled
- Health checks
- Exposed ports:
-    - 5080: HTTP API and UI
-    - 5081: OTLP gRPC
-
-#### OpenTelemetry Collector Configuration
-
-The collector is configured to:
-
- Receive telemetry data via OTLP (HTTP and gRPC)
- Collect logs from files
- Process data in batches
- Export data to OpenObserve
- Manage memory usage
-
-### Integration with Your Application
-
-To send telemetry data from your application, configure your OpenTelemetry SDK to send data to:
-
- OTLP gRPC: `localhost:4317`
- OTLP HTTP: `localhost:4318`
-
-For example, in a Rust application using the `rustfs-obs` library:
-
-```bash
-export RUSTFS_OBS_ENDPOINT=http://localhost:4318
-export RUSTFS_OBS_SERVICE_NAME=yourservice
-export RUSTFS_OBS_SERVICE_VERSION=1.0.0
-export RUSTFS_OBS_ENVIRONMENT=development
-```
-
@@ -1,75 +0,0 @@
-# OpenObserve + OpenTelemetry Collector
-
-[![OpenObserve](https://img.shields.io/badge/OpenObserve-OpenSource-blue.svg)](https://openobserve.org)
-[![OpenTelemetry](https://img.shields.io/badge/OpenTelemetry-Collector-green.svg)](https://opentelemetry.io/)
-
-[English](README.md) | 中文
-
-## 中文
-
-本目录包含搭建 OpenObserve 和 OpenTelemetry Collector 可观测性栈的配置文件。
-
-### 概述
-
-此设置为应用程序提供了完整的可观测性解决方案：
-
- **OpenObserve**：现代化、开源的可观测性平台，用于日志、指标和追踪。
- **OpenTelemetry Collector**：收集和处理遥测数据，然后将其发送到 OpenObserve。
-
-### 设置说明
-
-1. **前提条件**：
-    - 已安装 Docker 和 Docker Compose
-    - 足够的内存资源（建议至少 2GB）
-
-2. **启动服务**：
-   ```bash
-   cd .docker/openobserve-otel
-   docker compose -f docker-compose.yml  up -d
-   ```
-
-3. **访问仪表板**：
-    - OpenObserve UI：http://localhost:5080
-    - 默认凭据：
-        - 用户名：root@rustfs.com
-        - 密码：rustfs123
-
-### 配置
-
-#### OpenObserve 配置
-
-OpenObserve 服务配置：
-
- 根用户凭据
- 通过卷挂载实现数据持久化
- 启用内存缓存
- 健康检查
- 暴露端口：
-    - 5080：HTTP API 和 UI
-    - 5081：OTLP gRPC
-
-#### OpenTelemetry Collector 配置
-
-收集器配置为：
-
- 通过 OTLP（HTTP 和 gRPC）接收遥测数据
- 从文件中收集日志
- 批处理数据
- 将数据导出到 OpenObserve
- 管理内存使用
-
-### 与应用程序集成
-
-要从应用程序发送遥测数据，将 OpenTelemetry SDK 配置为发送数据到：
-
- OTLP gRPC:`localhost:4317`
- OTLP HTTP:`localhost:4318`
-
-例如，在使用 `rustfs-obs` 库的 Rust 应用程序中：
-
-```bash
-export RUSTFS_OBS_ENDPOINT=http://localhost:4317
-export RUSTFS_OBS_SERVICE_NAME=yourservice
-export RUSTFS_OBS_SERVICE_VERSION=1.0.0
-export RUSTFS_OBS_ENVIRONMENT=development
-```
@@ -1,87 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
-  openobserve:
-    image: public.ecr.aws/zinclabs/openobserve:latest
-    restart: unless-stopped
-    environment:
-      ZO_ROOT_USER_EMAIL: "root@rustfs.com"
-      ZO_ROOT_USER_PASSWORD: "rustfs123"
-      ZO_TRACING_HEADER_KEY: "Authorization"
-      ZO_TRACING_HEADER_VALUE: "Basic cm9vdEBydXN0ZnMuY29tOmQ4SXlCSEJTUkk3RGVlcEQ="
-      ZO_DATA_DIR: "/data"
-      ZO_MEMORY_CACHE_ENABLED: "true"
-      ZO_MEMORY_CACHE_MAX_SIZE: "256"
-      RUST_LOG: "info"
-      TZ: Asia/Shanghai
-    ports:
-      - "5080:5080"
-      - "5081:5081"
-    volumes:
-      - ./data:/data
-    healthcheck:
-      test: [ "CMD", "curl", "-f", "http://localhost:5080/health" ]
-      start_period: 60s
-      interval: 10s
-      timeout: 5s
-      retries: 6
-    networks:
-      - otel-network
-    deploy:
-      resources:
-        limits:
-          memory: 1024M
-        reservations:
-          memory: 512M
-
-  otel-collector:
-    image: otel/opentelemetry-collector-contrib:latest
-    restart: unless-stopped
-    environment:
-      - TZ=Asia/Shanghai
-    volumes:
-      - ./otel-collector-config.yaml:/etc/otelcol-contrib/config.yaml
-    ports:
-      - "4317:4317" # OTLP gRPC
-      - "4318:4318" # OTLP HTTP
-      - "13133:13133" # Health check
-      - "1777:1777" # pprof
-      - "55679:55679" # zpages
-      - "1888:1888" # Metrics
-      - "8888:8888" # Prometheus metrics
-      - "8889:8889" # Additional metrics endpoint
-    depends_on:
-      - openobserve
-    networks:
-      - otel-network
-    deploy:
-      resources:
-        limits:
-          memory: 10240M
-        reservations:
-          memory: 512M
-
-networks:
-  otel-network:
-    driver: bridge
-    name: otel-network
-    ipam:
-      config:
-        - subnet: 172.28.0.0/16
-          gateway: 172.28.0.1
-    labels:
-      com.example.description: "Network for OpenObserve and OpenTelemetry Collector"
-volumes:
-  data:
@@ -1,92 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-receivers:
-  otlp:
-    protocols:
-      grpc:
-        endpoint: 0.0.0.0:4317
-      http:
-        endpoint: 0.0.0.0:4318
-  filelog:
-    include: [ "/var/log/app/*.log" ]
-    start_at: end
-
-processors:
-  batch:
-    timeout: 1s
-    send_batch_size: 1024
-  memory_limiter:
-    check_interval: 1s
-    limit_mib: 400
-    spike_limit_mib: 100
-
-exporters:
-  otlphttp/openobserve:
-    endpoint: http://openobserve:5080/api/default # http://127.0.0.1:5080/api/default
-    headers:
-      Authorization: "Basic cm9vdEBydXN0ZnMuY29tOmQ4SXlCSEJTUkk3RGVlcEQ="
-      stream-name: default
-      organization: default
-    compression: gzip
-    retry_on_failure:
-      enabled: true
-      initial_interval: 5s
-      max_interval: 30s
-      max_elapsed_time: 300s
-    timeout: 10s
-  otlp/openobserve:
-    endpoint: openobserve:5081 # http://127.0.0.1:5080/api/default
-    headers:
-      Authorization: "Basic cm9vdEBydXN0ZnMuY29tOmQ4SXlCSEJTUkk3RGVlcEQ="
-      stream-name: default
-      organization: default
-    compression: gzip
-    retry_on_failure:
-      enabled: true
-      initial_interval: 5s
-      max_interval: 30s
-      max_elapsed_time: 300s
-    timeout: 10s
-    tls:
-      insecure: true
-
-extensions:
-  health_check:
-    endpoint: 0.0.0.0:13133
-  pprof:
-    endpoint: 0.0.0.0:1777
-  zpages:
-    endpoint: 0.0.0.0:55679
-
-service:
-  extensions: [ health_check, pprof, zpages ]
-  pipelines:
-    traces:
-      receivers: [ otlp ]
-      processors: [ memory_limiter, batch ]
-      exporters: [ otlp/openobserve ]
-    metrics:
-      receivers: [ otlp ]
-      processors: [ memory_limiter, batch ]
-      exporters: [ otlp/openobserve ]
-    logs:
-      receivers: [ otlp, filelog ]
-      processors: [ memory_limiter, batch ]
-      exporters: [ otlp/openobserve ]
-  telemetry:
-    logs:
-      level: "info"  # Collector 日志级别
-    metrics:
-      address: "0.0.0.0:8888"  # Collector 自身指标暴露
@@ -1 +0,0 @@
-target
@@ -1 +0,0 @@
-use flake
@@ -1,38 +0,0 @@
---
-name: Bug report
-about: Create a report to help us improve
-title: ''
-labels: ''
-assignees: ''
-
---
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps to reproduce the behavior:
-1. Go to '...'
-2. Click on '....'
-3. Scroll down to '....'
-4. See error
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
-
-**Screenshots**
-If applicable, add screenshots to help explain your problem.
-
-**Desktop (please complete the following information):**
- - OS: [e.g. iOS]
- - Browser [e.g. chrome, safari]
- - Version [e.g. 22]
-
-**Smartphone (please complete the following information):**
- - Device: [e.g. iPhone6]
- - OS: [e.g. iOS8.1]
- - Browser [e.g. stock browser, safari]
- - Version [e.g. 22]
-
-**Additional context**
-Add any other context about the problem here.
@@ -1,20 +0,0 @@
---
-name: Feature request
-about: Suggest an idea for this project
-title: ''
-labels: ''
-assignees: ''
-
---
-
-**Is your feature request related to a problem? Please describe.**
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-
-**Describe the solution you'd like**
-A clear and concise description of what you want to happen.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
-
-**Additional context**
-Add any other context or screenshots about the feature request here.
@@ -1,93 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: "Setup Rust Environment"
-description: "Setup Rust development environment with caching for RustFS"
-
-inputs:
-  rust-version:
-    description: "Rust version to install"
-    required: false
-    default: "stable"
-  cache-shared-key:
-    description: "Shared cache key for Rust dependencies"
-    required: false
-    default: "rustfs-deps"
-  cache-save-if:
-    description: "Condition for saving cache"
-    required: false
-    default: "true"
-  install-cross-tools:
-    description: "Install cross-compilation tools"
-    required: false
-    default: "false"
-  target:
-    description: "Target architecture to add"
-    required: false
-    default: ""
-  github-token:
-    description: "GitHub token for API access"
-    required: false
-    default: ""
-
-runs:
-  using: "composite"
-  steps:
-    - name: Install system dependencies (Ubuntu)
-      if: runner.os == 'Linux'
-      shell: bash
-      run: |
-        sudo apt-get update
-        sudo apt-get install -y \
-          musl-tools \
-          build-essential \
-          pkg-config \
-          libssl-dev
-
-    - name: Install protoc
-      uses: arduino/setup-protoc@v3
-      with:
-        version: "33.1"
-        repo-token: ${{ inputs.github-token }}
-
-    - name: Install flatc
-      uses: Nugine/setup-flatc@v1
-      with:
-        version: "25.9.23"
-
-    - name: Install Rust toolchain
-      uses: dtolnay/rust-toolchain@stable
-      with:
-        toolchain: ${{ inputs.rust-version }}
-        targets: ${{ inputs.target }}
-        components: rustfmt, clippy
-
-    - name: Install Zig
-      if: inputs.install-cross-tools == 'true'
-      uses: mlugg/setup-zig@v2
-
-    - name: Install cargo-zigbuild
-      if: inputs.install-cross-tools == 'true'
-      uses: taiki-e/install-action@cargo-zigbuild
-
-    - name: Install cargo-nextest
-      uses: taiki-e/install-action@cargo-nextest
-
-    - name: Setup Rust cache
-      uses: Swatinem/rust-cache@v2
-      with:
-        cache-all-crates: true
-        cache-on-failure: true
-        shared-key: ${{ inputs.cache-shared-key }}
-        save-if: ${{ inputs.cache-save-if }}
@@ -1 +0,0 @@
-../AGENTS.md
@@ -1,42 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
-version: 2
-updates:
-  - package-ecosystem: "cargo" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      timezone: "Asia/Shanghai"
-      time: "08:00"
-    ignore:
-      - dependency-name: "object_store"
-        versions: [ "0.13.x" ]
-    groups:
-      s3s:
-        update-types:
-          - "minor"
-          - "patch"
-        patterns:
-          - "s3s"
-          - "s3s-*"
-      dependencies:
-        patterns:
-          - "*"
@@ -1,37 +0,0 @@
-<!--
-Pull Request Template for RustFS
-->
-
-## Type of Change
- [ ] New Feature
- [ ] Bug Fix
- [ ] Documentation
- [ ] Performance Improvement
- [ ] Test/CI
- [ ] Refactor
- [ ] Other:
-
-## Related Issues
-<!-- List related Issue numbers, e.g. #123 -->
-
-## Summary of Changes
-<!-- Briefly describe the main changes and motivation for this PR -->
-
-## Checklist
- [ ] I have read and followed the [CONTRIBUTING.md](CONTRIBUTING.md) guidelines
- [ ] Passed `make pre-commit`
- [ ] Added/updated necessary tests
- [ ] Documentation updated (if needed)
- [ ] CI/CD passed (if applicable)
-
-## Impact
- [ ] Breaking change (compatibility)
- [ ] Requires doc/config/deployment update
- [ ] Other impact:
-
-## Additional Notes
-<!-- Any extra information for reviewers -->
-
---
-
-Thank you for your contribution! Please ensure your PR follows the community standards ([CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)) and sign the CLA if this is your first contribution.
@@ -1,103 +0,0 @@
-# S3 Compatibility Tests Configuration
-
-This directory contains the configuration for running [Ceph S3 compatibility tests](https://github.com/ceph/s3-tests) against RustFS.
-
-## Configuration File
-
-The `s3tests.conf` file is based on the official `s3tests.conf.SAMPLE` from the ceph/s3-tests repository. It uses environment variable substitution via `envsubst` to configure the endpoint and credentials.
-
-### Key Configuration Points
-
- **Host**: Set via `${S3_HOST}` environment variable (e.g., `rustfs-single` for single-node, `lb` for multi-node)
- **Port**: 9000 (standard RustFS port)
- **Credentials**: Uses `${S3_ACCESS_KEY}` and `${S3_SECRET_KEY}` from workflow environment
- **TLS**: Disabled (`is_secure = False`)
-
-## Test Execution Strategy
-
-### Network Connectivity Fix
-
-Tests run inside a Docker container on the `rustfs-net` network, which allows them to resolve and connect to the RustFS container hostnames. This fixes the "Temporary failure in name resolution" error that occurred when tests ran on the GitHub runner host.
-
-### Performance Optimizations
-
-1. **Parallel Execution**: Uses `pytest-xdist` with `-n 4` to run tests in parallel across 4 workers
-2. **Load Distribution**: Uses `--dist=loadgroup` to distribute test groups across workers
-3. **Fail-Fast**: Uses `--maxfail=50` to stop after 50 failures, saving time on catastrophic failures
-
-### Feature Filtering
-
-Tests are filtered using pytest markers (`-m`) to skip features not yet supported by RustFS:
-
- `lifecycle` - Bucket lifecycle policies
- `versioning` - Object versioning
- `s3website` - Static website hosting
- `bucket_logging` - Bucket logging
- `encryption` / `sse_s3` - Server-side encryption
- `cloud_transition` / `cloud_restore` - Cloud storage transitions
- `lifecycle_expiration` / `lifecycle_transition` - Lifecycle operations
-
-This filtering:
-1. Reduces test execution time significantly (from 1+ hour to ~10-15 minutes)
-2. Focuses on features RustFS currently supports
-3. Avoids hundreds of expected failures
-
-## Running Tests Locally
-
-### Single-Node Test
-
-```bash
-# Set credentials
-export S3_ACCESS_KEY=rustfsadmin
-export S3_SECRET_KEY=rustfsadmin
-
-# Start RustFS container
-docker run -d --name rustfs-single \
-  --network rustfs-net \
-  -e RUSTFS_ADDRESS=0.0.0.0:9000 \
-  -e RUSTFS_ACCESS_KEY=$S3_ACCESS_KEY \
-  -e RUSTFS_SECRET_KEY=$S3_SECRET_KEY \
-  -e RUSTFS_VOLUMES="/data/rustfs0 /data/rustfs1 /data/rustfs2 /data/rustfs3" \
-  rustfs-ci
-
-# Generate config
-export S3_HOST=rustfs-single
-envsubst < .github/s3tests/s3tests.conf > /tmp/s3tests.conf
-
-# Run tests
-docker run --rm \
-  --network rustfs-net \
-  -v /tmp/s3tests.conf:/etc/s3tests.conf:ro \
-  python:3.12-slim \
-  bash -c '
-    apt-get update -qq && apt-get install -y -qq git
-    git clone --depth 1 https://github.com/ceph/s3-tests.git /s3-tests
-    cd /s3-tests
-    pip install -q -r requirements.txt pytest-xdist
-    S3TEST_CONF=/etc/s3tests.conf pytest -v -n 4 \
-      s3tests/functional/test_s3.py \
-      -m "not lifecycle and not versioning and not s3website and not bucket_logging and not encryption and not sse_s3"
-  '
-```
-
-## Test Results Interpretation
-
- **PASSED**: Test succeeded, feature works correctly
- **FAILED**: Test failed, indicates a potential bug or incompatibility
- **ERROR**: Test setup failed (e.g., network issues, missing dependencies)
- **SKIPPED**: Test skipped due to marker filtering
-
-## Adding New Feature Support
-
-When adding support for a new S3 feature to RustFS:
-
-1. Remove the corresponding marker from the filter in `.github/workflows/e2e-s3tests.yml`
-2. Run the tests to verify compatibility
-3. Fix any failing tests
-4. Update this README to reflect the newly supported feature
-
-## References
-
- [Ceph S3 Tests Repository](https://github.com/ceph/s3-tests)
- [S3 API Compatibility](https://docs.aws.amazon.com/AmazonS3/latest/API/)
- [pytest-xdist Documentation](https://pytest-xdist.readthedocs.io/)
@@ -1,193 +0,0 @@
-# RustFS s3-tests configuration
-# Based on: https://github.com/ceph/s3-tests/blob/master/s3tests.conf.SAMPLE
-#
-# Usage:
-#   Single-node: S3_HOST=rustfs-single envsubst < s3tests.conf > /tmp/s3tests.conf
-#   Multi-node:  S3_HOST=lb envsubst < s3tests.conf > /tmp/s3tests.conf
-
-[DEFAULT]
-## this section is just used for host, port and bucket_prefix
-
-# host set for RustFS - will be substituted via envsubst
-host = ${S3_HOST}
-
-# port for RustFS
-port = 9000
-
-## say "False" to disable TLS
-is_secure = False
-
-## say "False" to disable SSL Verify
-ssl_verify = False
-
-[fixtures]
-## all the buckets created will start with this prefix;
-## {random} will be filled with random characters to pad
-## the prefix to 30 characters long, and avoid collisions
-bucket prefix = rustfs-{random}-
-
-# all the iam account resources (users, roles, etc) created
-# will start with this name prefix
-iam name prefix = s3-tests-
-
-# all the iam account resources (users, roles, etc) created
-# will start with this path prefix
-iam path prefix = /s3-tests/
-
-[s3 main]
-# main display_name
-display_name = RustFS Tester
-
-# main user_id
-user_id = rustfsadmin
-
-# main email
-email = tester@rustfs.local
-
-# zonegroup api_name for bucket location
-api_name = default
-
-## main AWS access key
-access_key = ${S3_ACCESS_KEY}
-
-## main AWS secret key
-secret_key = ${S3_SECRET_KEY}
-
-## replace with key id obtained when secret is created, or delete if KMS not tested
-#kms_keyid = 01234567-89ab-cdef-0123-456789abcdef
-
-## Storage classes
-#storage_classes = "LUKEWARM, FROZEN"
-
-## Lifecycle debug interval (default: 10)
-#lc_debug_interval = 20
-## Restore debug interval (default: 100)
-#rgw_restore_debug_interval = 60
-#rgw_restore_processor_period = 60
-
-[s3 alt]
-# alt display_name
-display_name = RustFS Alt Tester
-
-## alt email
-email = alt@rustfs.local
-
-# alt user_id
-user_id = rustfsalt
-
-# alt AWS access key (must be different from s3 main for many tests)
-access_key = ${S3_ALT_ACCESS_KEY}
-
-# alt AWS secret key
-secret_key = ${S3_ALT_SECRET_KEY}
-
-#[s3 cloud]
-## to run the testcases with "cloud_transition" for transition
-## and "cloud_restore" for restore attribute.
-## Note: the waiting time may have to tweaked depending on
-## the I/O latency to the cloud endpoint.
-
-## host set for cloud endpoint
-# host = localhost
-
-## port set for cloud endpoint
-# port = 8001
-
-## say "False" to disable TLS
-# is_secure = False
-
-## cloud endpoint credentials
-# access_key = 0555b35654ad1656d804
-# secret_key = h7GhxuBLTrlhVUyxSPUKUV8r/2EI4ngqJxD7iBdBYLhwluN30JaT3Q==
-
-## storage class configured as cloud tier on local rgw server
-# cloud_storage_class = CLOUDTIER
-
-## Below are optional -
-
-## Above configured cloud storage class config options
-# retain_head_object = false
-# allow_read_through = false    # change it to enable read_through
-# read_through_restore_days = 2
-# target_storage_class = Target_SC
-# target_path = cloud-bucket
-
-## another regular storage class to test multiple transition rules,
-# storage_class = S1
-
-[s3 tenant]
-# tenant display_name
-display_name = RustFS Tenant Tester
-
-# tenant user_id
-# Note: Using same user_id as main to avoid teardown failures.
-# RustFS does not currently support multi-tenancy, so the tenant client
-# effectively operates as the main user. This ensures nuke_prefixed_buckets()
-# in s3-tests teardown can successfully clean up resources.
-user_id = rustfsadmin
-
-# tenant AWS access key
-access_key = ${S3_ACCESS_KEY}
-
-# tenant AWS secret key
-secret_key = ${S3_SECRET_KEY}
-
-# tenant email
-email = tenant@rustfs.local
-
-# tenant name
-# Note: Empty tenant name to avoid multi-tenant path issues during teardown.
-# When s3-tests calls get_tenant_client(), it uses this tenant value in requests.
-# An empty value makes the tenant client behave like the main client, preventing
-# "bucket not found" errors when teardown tries to clean up test buckets.
-tenant =
-
-#following section needs to be added for all sts-tests
-[iam]
-#used for iam operations in sts-tests
-#email
-email = s3@rustfs.local
-
-#user_id
-user_id = rustfsiam
-
-#access_key
-access_key = ${S3_ACCESS_KEY}
-
-#secret_key
-secret_key = ${S3_SECRET_KEY}
-
-#display_name
-display_name = RustFS IAM User
-
-# iam account root user for iam_account tests
-[iam root]
-access_key = ${S3_ACCESS_KEY}
-secret_key = ${S3_SECRET_KEY}
-user_id = RGW11111111111111111
-email = account1@rustfs.local
-
-# iam account root user in a different account than [iam root]
-[iam alt root]
-access_key = ${S3_ACCESS_KEY}
-secret_key = ${S3_SECRET_KEY}
-user_id = RGW22222222222222222
-email = account2@rustfs.local
-
-#following section needs to be added when you want to run Assume Role With Webidentity test
-[webidentity]
-#used for assume role with web identity test in sts-tests
-#all parameters will be obtained from ceph/qa/tasks/keycloak.py
-#token=<access_token>
-
-#aud=<obtained after introspecting token>
-
-#sub=<obtained after introspecting token>
-
-#azp=<obtained after introspecting token>
-
-#user_token=<access token for a user, with attribute Department=[Engineering, Marketing>]
-
-#thumbprint=<obtained from x509 certificate>
-
-#KC_REALM=<name of the realm>
@@ -1,81 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: Security Audit
-
-on:
-  push:
-    branches: [ main ]
-    paths:
-      - '**/Cargo.toml'
-      - '**/Cargo.lock'
-      - '.github/workflows/audit.yml'
-  pull_request:
-    branches: [ main ]
-    paths:
-      - '**/Cargo.toml'
-      - '**/Cargo.lock'
-      - '.github/workflows/audit.yml'
-  schedule:
-    - cron: '0 0 * * 0' # Weekly on Sunday at midnight UTC
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-env:
-  CARGO_TERM_COLOR: always
-
-jobs:
-  security-audit:
-    name: Security Audit
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 15
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Install cargo-audit
-        uses: taiki-e/install-action@v2
-        with:
-          tool: cargo-audit
-
-      - name: Run security audit
-        run: |
-          cargo audit -D warnings --json | tee audit-results.json
-
-      - name: Upload audit results
-        if: always()
-        uses: actions/upload-artifact@v6
-        with:
-          name: security-audit-results-${{ github.run_number }}
-          path: audit-results.json
-          retention-days: 30
-
-  dependency-review:
-    name: Dependency Review
-    runs-on: ubicloud-standard-2
-    if: github.event_name == 'pull_request'
-    permissions:
-      contents: read
-      pull-requests: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Dependency Review
-        uses: actions/dependency-review-action@v4
-        with:
-          fail-on-severity: moderate
-          comment-summary-in-pr: true
@@ -1,850 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Build and Release Workflow
-#
-# This workflow builds RustFS binaries and automatically triggers Docker image builds.
-#
-# Flow:
-# 1. Build binaries for multiple platforms
-# 2. Upload binaries to OSS storage
-# 3. Trigger docker.yml to build and push images using the uploaded binaries
-#
-# Manual Parameters:
-# - build_docker: Build and push Docker images (default: true)
-
-name: Build and Release
-
-on:
-  push:
-    tags: [ "*.*.*" ]
-    branches: [ main ]
-    paths-ignore:
-      - "**.md"
-      - "**.txt"
-      - ".github/**"
-      - "docs/**"
-      - "deploy/**"
-      - "scripts/dev_*.sh"
-      - "LICENSE*"
-      - "README*"
-      - "**/*.png"
-      - "**/*.jpg"
-      - "**/*.svg"
-      - ".gitignore"
-      - ".dockerignore"
-  pull_request:
-    branches: [ main ]
-    paths-ignore:
-      - "**.md"
-      - "**.txt"
-      - ".github/**"
-      - "docs/**"
-      - "deploy/**"
-      - "scripts/dev_*.sh"
-      - "LICENSE*"
-      - "README*"
-      - "**/*.png"
-      - "**/*.jpg"
-      - "**/*.svg"
-      - ".gitignore"
-      - ".dockerignore"
-  schedule:
-    - cron: "0 0 * * 0" # Weekly on Sunday at midnight UTC
-  workflow_dispatch:
-    inputs:
-      build_docker:
-        description: "Build and push Docker images after binary build"
-        required: false
-        default: true
-        type: boolean
-
-permissions:
-  contents: read
-
-env:
-  CARGO_TERM_COLOR: always
-  RUST_BACKTRACE: 1
-  # Optimize build performance
-  CARGO_INCREMENTAL: 0
-
-jobs:
-  # Build strategy check - determine build type based on trigger
-  build-check:
-    name: Build Strategy Check
-    runs-on: ubicloud-standard-2
-    outputs:
-      should_build: ${{ steps.check.outputs.should_build }}
-      build_type: ${{ steps.check.outputs.build_type }}
-      version: ${{ steps.check.outputs.version }}
-      short_sha: ${{ steps.check.outputs.short_sha }}
-      is_prerelease: ${{ steps.check.outputs.is_prerelease }}
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Determine build strategy
-        id: check
-        run: |
-          should_build=false
-          build_type="none"
-          version=""
-          short_sha=""
-          is_prerelease=false
-
-          # Get short SHA for all builds
-          short_sha=$(git rev-parse --short HEAD)
-
-          # Determine build type based on trigger
-          if [[ "${{ startsWith(github.ref, 'refs/tags/') }}" == "true" ]]; then
-            # Tag push - release or prerelease
-            should_build=true
-            tag_name="${GITHUB_REF#refs/tags/}"
-            version="${tag_name}"
-
-            # Check if this is a prerelease
-            if [[ "$tag_name" == *"alpha"* ]] || [[ "$tag_name" == *"beta"* ]] || [[ "$tag_name" == *"rc"* ]]; then
-              build_type="prerelease"
-              is_prerelease=true
-              echo "🚀 Prerelease build detected: $tag_name"
-            else
-              build_type="release"
-              echo "📦 Release build detected: $tag_name"
-            fi
-          elif [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
-            # Main branch push - development build
-            should_build=true
-            build_type="development"
-            version="dev-${short_sha}"
-            echo "🛠️  Development build detected"
-          elif [[ "${{ github.event_name }}" == "schedule" ]] || \
-               [[ "${{ github.event_name }}" == "workflow_dispatch" ]] || \
-               [[ "${{ contains(github.event.head_commit.message, '--build') }}" == "true" ]]; then
-            # Scheduled or manual build
-            should_build=true
-            build_type="development"
-            version="dev-${short_sha}"
-            echo "⚡ Manual/scheduled build detected"
-          fi
-
-          echo "should_build=$should_build" >> $GITHUB_OUTPUT
-          echo "build_type=$build_type" >> $GITHUB_OUTPUT
-          echo "version=$version" >> $GITHUB_OUTPUT
-          echo "short_sha=$short_sha" >> $GITHUB_OUTPUT
-          echo "is_prerelease=$is_prerelease" >> $GITHUB_OUTPUT
-
-          echo "📊 Build Summary:"
-          echo "  - Should build: $should_build"
-          echo "  - Build type: $build_type"
-          echo "  - Version: $version"
-          echo "  - Short SHA: $short_sha"
-          echo "  - Is prerelease: $is_prerelease"
-
-  # Build RustFS binaries
-  build-rustfs:
-    name: Build RustFS
-    needs: [ build-check ]
-    if: needs.build-check.outputs.should_build == 'true'
-    runs-on: ${{ matrix.os }}
-    timeout-minutes: 60
-    env:
-      RUSTFLAGS: ${{ matrix.cross == 'false' && '-C target-cpu=native' || '' }}
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          # Linux builds
-          - os: ubicloud-standard-2
-            target: x86_64-unknown-linux-musl
-            cross: false
-            platform: linux
-          - os: ubicloud-standard-2
-            target: aarch64-unknown-linux-musl
-            cross: true
-            platform: linux
-          - os: ubicloud-standard-2
-            target: x86_64-unknown-linux-gnu
-            cross: false
-            platform: linux
-          - os: ubicloud-standard-2
-            target: aarch64-unknown-linux-gnu
-            cross: true
-            platform: linux
-          # macOS builds
-          - os: macos-latest
-            target: aarch64-apple-darwin
-            cross: false
-            platform: macos
-          - os: macos-latest
-            target: x86_64-apple-darwin
-            cross: false
-            platform: macos
-          # Windows builds (temporarily disabled)
-          - os: windows-latest
-            target: x86_64-pc-windows-msvc
-            cross: false
-            platform: windows
-          #- os: windows-latest
-          #  target: aarch64-pc-windows-msvc
-          #  cross: true
-          #  platform: windows
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Setup Rust environment
-        uses: ./.github/actions/setup
-        with:
-          rust-version: stable
-          target: ${{ matrix.target }}
-          cache-shared-key: build-${{ matrix.target }}-${{ hashFiles('**/Cargo.lock') }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          cache-save-if: ${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
-          install-cross-tools: ${{ matrix.cross }}
-
-      - name: Download static console assets
-        shell: bash
-        run: |
-          mkdir -p ./rustfs/static
-          if [[ "${{ matrix.platform }}" == "windows" ]]; then
-            curl.exe -L "https://dl.rustfs.com/artifacts/console/rustfs-console-latest.zip" -o console.zip --retry 3 --retry-delay 5 --max-time 300
-            if [[ $? -eq 0 ]]; then
-              unzip -o console.zip -d ./rustfs/static
-              rm console.zip
-            else
-              echo "Warning: Failed to download console assets, continuing without them"
-              echo "// Static assets not available" > ./rustfs/static/empty.txt
-            fi
-          else
-            chmod +w ./rustfs/static/LICENSE || true
-            curl -L "https://dl.rustfs.com/artifacts/console/rustfs-console-latest.zip" \
-              -o console.zip --retry 3 --retry-delay 5 --max-time 300
-            if [[ $? -eq 0 ]]; then
-              unzip -o console.zip -d ./rustfs/static
-              rm console.zip
-            else
-              echo "Warning: Failed to download console assets, continuing without them"
-              echo "// Static assets not available" > ./rustfs/static/empty.txt
-            fi
-          fi
-
-      - name: Build RustFS
-        shell: bash
-        run: |
-          # Force rebuild by touching build.rs
-          touch rustfs/build.rs
-
-          if [[ "${{ matrix.cross }}" == "true" ]]; then
-            if [[ "${{ matrix.platform }}" == "windows" ]]; then
-              # Use cross for Windows ARM64
-              cargo install cross --git https://github.com/cross-rs/cross
-              cross build --release --target ${{ matrix.target }} -p rustfs --bins
-            else
-              # Use zigbuild for other cross-compilation
-              cargo zigbuild --release --target ${{ matrix.target }} -p rustfs --bins
-            fi
-          else
-            cargo build --release --target ${{ matrix.target }} -p rustfs --bins
-          fi
-
-      - name: Create release package
-        id: package
-        shell: bash
-        run: |
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-          VERSION="${{ needs.build-check.outputs.version }}"
-          SHORT_SHA="${{ needs.build-check.outputs.short_sha }}"
-
-          # Extract platform and arch from target
-          TARGET="${{ matrix.target }}"
-          PLATFORM="${{ matrix.platform }}"
-          # Map target to architecture and variant
-          case "$TARGET" in
-            *x86_64*musl*)
-              ARCH="x86_64"
-              VARIANT="musl"
-              ;;
-            *x86_64*gnu*)
-              ARCH="x86_64"
-              VARIANT="gnu"
-              ;;
-            *x86_64*)
-              ARCH="x86_64"
-              VARIANT=""
-              ;;
-            *aarch64*musl*|*arm64*musl*)
-              ARCH="aarch64"
-              VARIANT="musl"
-              ;;
-            *aarch64*gnu*|*arm64*gnu*)
-              ARCH="aarch64"
-              VARIANT="gnu"
-              ;;
-            *aarch64*|*arm64*)
-              ARCH="aarch64"
-              VARIANT=""
-              ;;
-            *armv7*)
-              ARCH="armv7"
-              VARIANT=""
-              ;;
-            *)
-              ARCH="unknown"
-              VARIANT=""
-              ;;
-          esac
-
-          # Generate package name based on build type
-          if [[ -n "$VARIANT" ]]; then
-            ARCH_WITH_VARIANT="${ARCH}-${VARIANT}"
-          else
-            ARCH_WITH_VARIANT="${ARCH}"
-          fi
-
-          if [[ "$BUILD_TYPE" == "development" ]]; then
-            # Development build: rustfs-${platform}-${arch}-${variant}-dev-${short_sha}.zip
-            PACKAGE_NAME="rustfs-${PLATFORM}-${ARCH_WITH_VARIANT}-dev-${SHORT_SHA}"
-          else
-            # Release/Prerelease build: rustfs-${platform}-${arch}-${variant}-v${version}.zip
-            PACKAGE_NAME="rustfs-${PLATFORM}-${ARCH_WITH_VARIANT}-v${VERSION}"
-          fi
-
-          # Create zip packages for all platforms
-          # Ensure zip is available
-          if ! command -v zip &> /dev/null; then
-            if [[ "${{ matrix.os }}" == "ubuntu-latest" ]]; then
-              sudo apt-get update && sudo apt-get install -y zip
-            fi
-          fi
-
-          cd target/${{ matrix.target }}/release
-          # Determine the binary name based on platform
-          if [[ "${{ matrix.platform }}" == "windows" ]]; then
-            BINARY_NAME="rustfs.exe"
-          else
-            BINARY_NAME="rustfs"
-          fi
-
-          # Verify the binary exists before packaging
-          if [[ ! -f "$BINARY_NAME" ]]; then
-            echo "❌ Binary $BINARY_NAME not found in $(pwd)"
-            if [[ "${{ matrix.platform }}" == "windows" ]]; then
-              dir
-            else
-              ls -la
-            fi
-            exit 1
-          fi
-
-          # Universal packaging function
-          package_zip() {
-            local src=$1
-            local dst=$2
-            if [[ "${{ matrix.platform }}" == "windows" ]]; then
-              # Windows uses PowerShell Compress-Archive
-              powershell -Command "Compress-Archive -Path '$src' -DestinationPath '$dst' -Force"
-            elif command -v zip &> /dev/null; then
-              # Unix systems use zip command
-              zip "$dst" "$src"
-            else
-              echo "❌ No zip utility available"
-              exit 1
-            fi
-          }
-
-          # Create the zip package
-          echo "Start packaging: $BINARY_NAME -> ../../../${PACKAGE_NAME}.zip"
-          package_zip "$BINARY_NAME" "../../../${PACKAGE_NAME}.zip"
-
-          cd ../../..
-
-          # Verify the package was created
-          if [[ -f "${PACKAGE_NAME}.zip" ]]; then
-            echo "✅ Package created successfully: ${PACKAGE_NAME}.zip"
-            if [[ "${{ matrix.platform }}" == "windows" ]]; then
-              dir
-            else
-              ls -lh ${PACKAGE_NAME}.zip
-            fi
-          else
-            echo "❌ Failed to create package: ${PACKAGE_NAME}.zip"
-            exit 1
-          fi
-
-          # Create latest version files right after the main package
-          LATEST_FILES=""
-          if [[ "$BUILD_TYPE" == "release" ]] || [[ "$BUILD_TYPE" == "prerelease" ]]; then
-            # Create latest version filename
-            # Convert from rustfs-linux-x86_64-musl-v1.0.0 to rustfs-linux-x86_64-musl-latest
-            LATEST_FILE="${PACKAGE_NAME%-v*}-latest.zip"
-
-            echo "🔄 Creating latest version: ${PACKAGE_NAME}.zip -> $LATEST_FILE"
-            cp "${PACKAGE_NAME}.zip" "$LATEST_FILE"
-
-            if [[ -f "$LATEST_FILE" ]]; then
-              echo "✅ Latest version created: $LATEST_FILE"
-              LATEST_FILES="$LATEST_FILE"
-            fi
-          elif [[ "$BUILD_TYPE" == "development" ]]; then
-            # Development builds (only main branch triggers development builds)
-            # Create main-latest version filename
-            # Convert from rustfs-linux-x86_64-dev-abc123 to rustfs-linux-x86_64-main-latest
-            MAIN_LATEST_FILE="${PACKAGE_NAME%-dev-*}-main-latest.zip"
-
-            echo "🔄 Creating main-latest version: ${PACKAGE_NAME}.zip -> $MAIN_LATEST_FILE"
-            cp "${PACKAGE_NAME}.zip" "$MAIN_LATEST_FILE"
-
-            if [[ -f "$MAIN_LATEST_FILE" ]]; then
-              echo "✅ Main-latest version created: $MAIN_LATEST_FILE"
-              LATEST_FILES="$MAIN_LATEST_FILE"
-
-              # Also create a generic main-latest for Docker builds (Linux only)
-              if [[ "${{ matrix.platform }}" == "linux" ]]; then
-                DOCKER_MAIN_LATEST_FILE="rustfs-linux-${ARCH_WITH_VARIANT}-main-latest.zip"
-
-                echo "🔄 Creating Docker main-latest version: ${PACKAGE_NAME}.zip -> $DOCKER_MAIN_LATEST_FILE"
-                cp "${PACKAGE_NAME}.zip" "$DOCKER_MAIN_LATEST_FILE"
-
-                if [[ -f "$DOCKER_MAIN_LATEST_FILE" ]]; then
-                  echo "✅ Docker main-latest version created: $DOCKER_MAIN_LATEST_FILE"
-                  LATEST_FILES="$LATEST_FILES $DOCKER_MAIN_LATEST_FILE"
-                fi
-              fi
-            fi
-          fi
-
-          echo "package_name=${PACKAGE_NAME}" >> $GITHUB_OUTPUT
-          echo "package_file=${PACKAGE_NAME}.zip" >> $GITHUB_OUTPUT
-          echo "latest_files=${LATEST_FILES}" >> $GITHUB_OUTPUT
-          echo "build_type=${BUILD_TYPE}" >> $GITHUB_OUTPUT
-          echo "version=${VERSION}" >> $GITHUB_OUTPUT
-
-          echo "📦 Package created: ${PACKAGE_NAME}.zip"
-          if [[ -n "$LATEST_FILES" ]]; then
-            echo "📦 Latest files created: $LATEST_FILES"
-          fi
-          echo "🔧 Build type: ${BUILD_TYPE}"
-          echo "📊 Version: ${VERSION}"
-
-      - name: Upload to GitHub artifacts
-        uses: actions/upload-artifact@v6
-        with:
-          name: ${{ steps.package.outputs.package_name }}
-          path: "rustfs-*.zip"
-          retention-days: ${{ startsWith(github.ref, 'refs/tags/') && 30 || 7 }}
-
-      - name: Upload to Aliyun OSS
-        if: env.OSS_ACCESS_KEY_ID != '' && (needs.build-check.outputs.build_type == 'release' || needs.build-check.outputs.build_type == 'prerelease' || needs.build-check.outputs.build_type == 'development')
-        env:
-          OSS_ACCESS_KEY_ID: ${{ secrets.ALICLOUDOSS_KEY_ID }}
-          OSS_ACCESS_KEY_SECRET: ${{ secrets.ALICLOUDOSS_KEY_SECRET }}
-          OSS_REGION: cn-beijing
-          OSS_ENDPOINT: https://oss-accelerate.aliyuncs.com
-        shell: bash
-        run: |
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-
-          # Install ossutil (platform-specific)
-          OSSUTIL_VERSION="2.1.1"
-          case "${{ matrix.platform }}" in
-            linux)
-              if [[ "$(uname -m)" == "arm64" ]]; then
-                ARCH="arm64"
-              else
-                ARCH="amd64"
-              fi
-              OSSUTIL_ZIP="ossutil-${OSSUTIL_VERSION}-linux-${ARCH}.zip"
-              OSSUTIL_DIR="ossutil-${OSSUTIL_VERSION}-linux-${ARCH}"
-
-              curl -o "$OSSUTIL_ZIP" "https://gosspublic.alicdn.com/ossutil/v2/${OSSUTIL_VERSION}/${OSSUTIL_ZIP}"
-              unzip "$OSSUTIL_ZIP"
-              mv "${OSSUTIL_DIR}/ossutil" /usr/local/bin/
-              rm -rf "$OSSUTIL_DIR" "$OSSUTIL_ZIP"
-              chmod +x /usr/local/bin/ossutil
-              OSSUTIL_BIN=ossutil
-              ;;
-            macos)
-              if [[ "$(uname -m)" == "arm64" ]]; then
-                ARCH="arm64"
-              else
-                ARCH="amd64"
-              fi
-              OSSUTIL_ZIP="ossutil-${OSSUTIL_VERSION}-mac-${ARCH}.zip"
-              OSSUTIL_DIR="ossutil-${OSSUTIL_VERSION}-mac-${ARCH}"
-
-              curl -o "$OSSUTIL_ZIP" "https://gosspublic.alicdn.com/ossutil/v2/${OSSUTIL_VERSION}/${OSSUTIL_ZIP}"
-              unzip "$OSSUTIL_ZIP"
-              mv "${OSSUTIL_DIR}/ossutil" /usr/local/bin/
-              rm -rf "$OSSUTIL_DIR" "$OSSUTIL_ZIP"
-              chmod +x /usr/local/bin/ossutil
-              OSSUTIL_BIN=ossutil
-              ;;
-            windows)
-              OSSUTIL_ZIP="ossutil-${OSSUTIL_VERSION}-windows-amd64.zip"
-              OSSUTIL_DIR="ossutil-${OSSUTIL_VERSION}-windows-amd64"
-
-              curl -o "$OSSUTIL_ZIP" "https://gosspublic.alicdn.com/ossutil/v2/${OSSUTIL_VERSION}/${OSSUTIL_ZIP}"
-              unzip "$OSSUTIL_ZIP"
-              mv "${OSSUTIL_DIR}/ossutil.exe" ./ossutil.exe
-              rm -rf "$OSSUTIL_DIR" "$OSSUTIL_ZIP"
-              OSSUTIL_BIN=./ossutil.exe
-              ;;
-          esac
-
-          # Determine upload path based on build type
-          if [[ "$BUILD_TYPE" == "development" ]]; then
-            OSS_PATH="oss://rustfs-artifacts/artifacts/rustfs/dev/"
-            echo "📤 Uploading development build to OSS dev directory"
-          else
-            OSS_PATH="oss://rustfs-artifacts/artifacts/rustfs/release/"
-            echo "📤 Uploading release build to OSS release directory"
-          fi
-
-          # Upload all rustfs zip files to OSS using glob pattern
-          echo "📤 Uploading all rustfs-*.zip files to $OSS_PATH..."
-          for zip_file in rustfs-*.zip; do
-            if [[ -f "$zip_file" ]]; then
-              echo "Uploading: $zip_file to $OSS_PATH..."
-              $OSSUTIL_BIN cp "$zip_file" "$OSS_PATH" --force
-              echo "✅ Uploaded: $zip_file"
-            fi
-          done
-
-          echo "✅ Upload completed successfully"
-
-  # Build summary
-  build-summary:
-    name: Build Summary
-    needs: [ build-check, build-rustfs ]
-    if: always() && needs.build-check.outputs.should_build == 'true'
-    runs-on: ubicloud-standard-2
-    steps:
-      - name: Build completion summary
-        shell: bash
-        run: |
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-          VERSION="${{ needs.build-check.outputs.version }}"
-
-          echo "🎉 Build completed successfully!"
-          echo "📦 Build type: $BUILD_TYPE"
-          echo "🔢 Version: $VERSION"
-          echo ""
-
-          # Check build status
-          BUILD_STATUS="${{ needs.build-rustfs.result }}"
-
-          echo "📊 Build Results:"
-          echo "  📦 All platforms: $BUILD_STATUS"
-          echo ""
-
-          case "$BUILD_TYPE" in
-            "development")
-              echo "🛠️  Development build artifacts have been uploaded to OSS dev directory"
-              echo "⚠️  This is a development build - not suitable for production use"
-              ;;
-            "release")
-              echo "🚀 Release build artifacts have been uploaded to OSS release directory"
-              echo "✅ This build is ready for production use"
-              echo "🏷️  GitHub Release will be created in this workflow"
-              ;;
-            "prerelease")
-              echo "🧪 Prerelease build artifacts have been uploaded to OSS release directory"
-              echo "⚠️  This is a prerelease build - use with caution"
-              echo "🏷️  GitHub Release will be created in this workflow"
-              ;;
-          esac
-
-          echo ""
-          echo "🐳 Docker Images:"
-          if [[ "${{ github.event.inputs.build_docker }}" == "false" ]]; then
-            echo "⏭️  Docker image build was skipped (binary only build)"
-          elif [[ "$BUILD_STATUS" == "success" ]]; then
-            echo "🔄 Docker images will be built and pushed automatically via workflow_run event"
-          else
-            echo "❌ Docker image build will be skipped due to build failure"
-          fi
-
-  # Create GitHub Release (only for tag pushes)
-  create-release:
-    name: Create GitHub Release
-    needs: [ build-check, build-rustfs ]
-    if: startsWith(github.ref, 'refs/tags/') && needs.build-check.outputs.build_type != 'development'
-    runs-on: ubicloud-standard-2
-    permissions:
-      contents: write
-    outputs:
-      release_id: ${{ steps.create.outputs.release_id }}
-      release_url: ${{ steps.create.outputs.release_url }}
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Create GitHub Release
-        id: create
-        env:
-          GH_TOKEN: ${{ github.token }}
-        shell: bash
-        run: |
-          TAG="${{ needs.build-check.outputs.version }}"
-          VERSION="${{ needs.build-check.outputs.version }}"
-          IS_PRERELEASE="${{ needs.build-check.outputs.is_prerelease }}"
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-
-          # Determine release type for title
-          if [[ "$BUILD_TYPE" == "prerelease" ]]; then
-            if [[ "$TAG" == *"alpha"* ]]; then
-              RELEASE_TYPE="alpha"
-            elif [[ "$TAG" == *"beta"* ]]; then
-              RELEASE_TYPE="beta"
-            elif [[ "$TAG" == *"rc"* ]]; then
-              RELEASE_TYPE="rc"
-            else
-              RELEASE_TYPE="prerelease"
-            fi
-          else
-            RELEASE_TYPE="release"
-          fi
-
-          # Check if release already exists
-          if gh release view "$TAG" >/dev/null 2>&1; then
-            echo "Release $TAG already exists"
-            RELEASE_ID=$(gh release view "$TAG" --json databaseId --jq '.databaseId')
-            RELEASE_URL=$(gh release view "$TAG" --json url --jq '.url')
-          else
-            # Get release notes from tag message
-            RELEASE_NOTES=$(git tag -l --format='%(contents)' "${TAG}")
-            if [[ -z "$RELEASE_NOTES" || "$RELEASE_NOTES" =~ ^[[:space:]]*$ ]]; then
-              if [[ "$IS_PRERELEASE" == "true" ]]; then
-                RELEASE_NOTES="Pre-release ${VERSION} (${RELEASE_TYPE})"
-              else
-                RELEASE_NOTES="Release ${VERSION}"
-              fi
-            fi
-
-            # Create release title
-            if [[ "$IS_PRERELEASE" == "true" ]]; then
-              TITLE="RustFS $VERSION (${RELEASE_TYPE})"
-            else
-              TITLE="RustFS $VERSION"
-            fi
-
-            # Create the release
-            PRERELEASE_FLAG=""
-            if [[ "$IS_PRERELEASE" == "true" ]]; then
-              PRERELEASE_FLAG="--prerelease"
-            fi
-
-            gh release create "$TAG" \
-              --title "$TITLE" \
-              --notes "$RELEASE_NOTES" \
-              $PRERELEASE_FLAG \
-              --draft
-
-            RELEASE_ID=$(gh release view "$TAG" --json databaseId --jq '.databaseId')
-            RELEASE_URL=$(gh release view "$TAG" --json url --jq '.url')
-          fi
-
-          echo "release_id=$RELEASE_ID" >> $GITHUB_OUTPUT
-          echo "release_url=$RELEASE_URL" >> $GITHUB_OUTPUT
-          echo "Created release: $RELEASE_URL"
-
-  # Prepare and upload release assets
-  upload-release-assets:
-    name: Upload Release Assets
-    needs: [ build-check, build-rustfs, create-release ]
-    if: startsWith(github.ref, 'refs/tags/') && needs.build-check.outputs.build_type != 'development'
-    runs-on: ubicloud-standard-2
-    permissions:
-      contents: write
-      actions: read
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Download all build artifacts
-        uses: actions/download-artifact@v7
-        with:
-          path: ./artifacts
-          pattern: rustfs-*
-          merge-multiple: true
-
-      - name: Prepare release assets
-        id: prepare
-        shell: bash
-        run: |
-          VERSION="${{ needs.build-check.outputs.version }}"
-          TAG="${{ needs.build-check.outputs.version }}"
-
-          mkdir -p ./release-assets
-
-          # Copy and verify artifacts (including latest files created during build)
-          ASSETS_COUNT=0
-          for file in ./artifacts/*.zip; do
-            if [[ -f "$file" ]]; then
-              cp "$file" ./release-assets/
-              ASSETS_COUNT=$((ASSETS_COUNT + 1))
-            fi
-          done
-
-          if [[ $ASSETS_COUNT -eq 0 ]]; then
-            echo "❌ No artifacts found!"
-            exit 1
-          fi
-
-          cd ./release-assets
-
-          # Generate checksums for all files (including latest versions)
-          if ls *.zip >/dev/null 2>&1; then
-            sha256sum *.zip > SHA256SUMS
-            sha512sum *.zip > SHA512SUMS
-          fi
-
-          # Create signature placeholder files
-          for file in *.zip; do
-            echo "# Signature for $file" > "${file}.asc"
-            echo "# GPG signature will be added in future versions" >> "${file}.asc"
-          done
-
-          echo "📦 Prepared assets:"
-          ls -la
-
-          echo "🔢 Total asset count: $ASSETS_COUNT"
-
-      - name: Upload to GitHub Release
-        env:
-          GH_TOKEN: ${{ github.token }}
-        shell: bash
-        run: |
-          TAG="${{ needs.build-check.outputs.version }}"
-
-          cd ./release-assets
-
-          # Upload all files
-          for file in *; do
-            if [[ -f "$file" ]]; then
-              echo "📤 Uploading $file..."
-              gh release upload "$TAG" "$file" --clobber
-            fi
-          done
-
-          echo "✅ All assets uploaded successfully"
-
-  # Update latest.json for stable releases only
-  update-latest-version:
-    name: Update Latest Version
-    needs: [ build-check, upload-release-assets ]
-    if: startsWith(github.ref, 'refs/tags/')
-    runs-on: ubicloud-standard-2
-    steps:
-      - name: Update latest.json
-        env:
-          OSS_ACCESS_KEY_ID: ${{ secrets.ALICLOUDOSS_KEY_ID }}
-          OSS_ACCESS_KEY_SECRET: ${{ secrets.ALICLOUDOSS_KEY_SECRET }}
-          OSS_REGION: cn-beijing
-          OSS_ENDPOINT: https://oss-cn-beijing.aliyuncs.com
-        shell: bash
-        run: |
-          if [[ -z "$OSS_ACCESS_KEY_ID" ]]; then
-            echo "⚠️ OSS credentials not available, skipping latest.json update"
-            exit 0
-          fi
-
-          VERSION="${{ needs.build-check.outputs.version }}"
-          TAG="${{ needs.build-check.outputs.version }}"
-
-          # Install ossutil
-          OSSUTIL_VERSION="2.1.1"
-          OSSUTIL_ZIP="ossutil-${OSSUTIL_VERSION}-linux-amd64.zip"
-          OSSUTIL_DIR="ossutil-${OSSUTIL_VERSION}-linux-amd64"
-
-          curl -o "$OSSUTIL_ZIP" "https://gosspublic.alicdn.com/ossutil/v2/${OSSUTIL_VERSION}/${OSSUTIL_ZIP}"
-          unzip "$OSSUTIL_ZIP"
-          mv "${OSSUTIL_DIR}/ossutil" /usr/local/bin/
-          rm -rf "$OSSUTIL_DIR" "$OSSUTIL_ZIP"
-          chmod +x /usr/local/bin/ossutil
-
-          # Create latest.json
-          cat > latest.json << EOF
-          {
-            "version": "${VERSION}",
-            "tag": "${TAG}",
-            "release_date": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
-            "release_type": "stable",
-            "download_url": "https://github.com/${{ github.repository }}/releases/tag/${TAG}"
-          }
-          EOF
-
-          # Upload to OSS
-          ossutil cp latest.json oss://rustfs-version/latest.json --force
-
-          echo "✅ Updated latest.json for stable release $VERSION"
-
-  # Publish release (remove draft status)
-  publish-release:
-    name: Publish Release
-    needs: [ build-check, create-release, upload-release-assets ]
-    if: startsWith(github.ref, 'refs/tags/') && needs.build-check.outputs.build_type != 'development'
-    runs-on: ubicloud-standard-2
-    permissions:
-      contents: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Update release notes and publish
-        env:
-          GH_TOKEN: ${{ github.token }}
-        shell: bash
-        run: |
-          TAG="${{ needs.build-check.outputs.version }}"
-          VERSION="${{ needs.build-check.outputs.version }}"
-          IS_PRERELEASE="${{ needs.build-check.outputs.is_prerelease }}"
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-
-          # Determine release type
-          if [[ "$BUILD_TYPE" == "prerelease" ]]; then
-            if [[ "$TAG" == *"alpha"* ]]; then
-              RELEASE_TYPE="alpha"
-            elif [[ "$TAG" == *"beta"* ]]; then
-              RELEASE_TYPE="beta"
-            elif [[ "$TAG" == *"rc"* ]]; then
-              RELEASE_TYPE="rc"
-            else
-              RELEASE_TYPE="prerelease"
-            fi
-          else
-            RELEASE_TYPE="release"
-          fi
-
-          # Get original release notes from tag
-          ORIGINAL_NOTES=$(git tag -l --format='%(contents)' "${TAG}")
-          if [[ -z "$ORIGINAL_NOTES" || "$ORIGINAL_NOTES" =~ ^[[:space:]]*$ ]]; then
-            if [[ "$IS_PRERELEASE" == "true" ]]; then
-              ORIGINAL_NOTES="Pre-release ${VERSION} (${RELEASE_TYPE})"
-            else
-              ORIGINAL_NOTES="Release ${VERSION}"
-            fi
-          fi
-
-          # Publish the release (remove draft status)
-          gh release edit "$TAG" --draft=false
-
-          echo "🎉 Released $TAG successfully!"
-          echo "📄 Release URL: ${{ needs.create-release.outputs.release_url }}"
@@ -1,182 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#      http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: Continuous Integration
-
-on:
-  push:
-    branches: [ main ]
-    paths-ignore:
-      - "**.md"
-      - "**.txt"
-      - "docs/**"
-      - "deploy/**"
-      - "scripts/dev_*.sh"
-      - "scripts/probe.sh"
-      - "LICENSE*"
-      - ".gitignore"
-      - ".dockerignore"
-      - "README*"
-      - "**/*.png"
-      - "**/*.jpg"
-      - "**/*.svg"
-      - ".github/workflows/build.yml"
-      - ".github/workflows/docker.yml"
-      - ".github/workflows/audit.yml"
-      - ".github/workflows/performance.yml"
-  pull_request:
-    branches: [ main ]
-    paths-ignore:
-      - "**.md"
-      - "**.txt"
-      - "docs/**"
-      - "deploy/**"
-      - "scripts/dev_*.sh"
-      - "scripts/probe.sh"
-      - "LICENSE*"
-      - ".gitignore"
-      - ".dockerignore"
-      - "README*"
-      - "**/*.png"
-      - "**/*.jpg"
-      - "**/*.svg"
-      - ".github/workflows/build.yml"
-      - ".github/workflows/docker.yml"
-      - ".github/workflows/audit.yml"
-      - ".github/workflows/performance.yml"
-  schedule:
-    - cron: "0 0 * * 0" # Weekly on Sunday at midnight UTC
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-env:
-  CARGO_TERM_COLOR: always
-  RUST_BACKTRACE: 1
-  CARGO_BUILD_JOBS: 2
-
-jobs:
-
-  skip-check:
-    name: Skip Duplicate Actions
-    permissions:
-      actions: write
-      contents: read
-    runs-on: ubicloud-standard-2
-    outputs:
-      should_skip: ${{ steps.skip_check.outputs.should_skip }}
-    steps:
-      - name: Skip duplicate actions
-        id: skip_check
-        uses: fkirc/skip-duplicate-actions@v5
-        with:
-          concurrent_skipping: "same_content_newer"
-          cancel_others: true
-          paths_ignore: '["*.md", "docs/**", "deploy/**"]'
-          do_not_skip: '["workflow_dispatch", "schedule", "merge_group", "release", "push"]'
-
-  typos:
-    name: Typos
-    runs-on: ubicloud-standard-2
-    steps:
-      - uses: actions/checkout@v6
-      - uses: dtolnay/rust-toolchain@stable
-      - name: Typos check with custom config file
-        uses: crate-ci/typos@master
-
-  test-and-lint:
-    name: Test and Lint
-    needs: skip-check
-    if: needs.skip-check.outputs.should_skip != 'true'
-    runs-on: ubicloud-standard-4
-    timeout-minutes: 60
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Setup Rust environment
-        uses: ./.github/actions/setup
-        with:
-          rust-version: stable
-          cache-shared-key: ci-test-${{ hashFiles('**/Cargo.lock') }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          cache-save-if: ${{ github.ref == 'refs/heads/main' }}
-
-      - name: Install cargo-nextest
-        uses: taiki-e/install-action@nextest
-
-      - name: Run tests
-        run: |
-          cargo nextest run --all --exclude e2e_test
-          cargo test --all --doc
-
-      - name: Check code formatting
-        run: cargo fmt --all --check
-
-      - name: Run clippy lints
-        run: cargo clippy --all-targets --all-features -- -D warnings
-
-  e2e-tests:
-    name: End-to-End Tests
-    needs: skip-check
-    if: needs.skip-check.outputs.should_skip != 'true'
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 30
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Clean up previous test run
-        run: |
-          rm -rf /tmp/rustfs
-          rm -f /tmp/rustfs.log
-
-      - name: Setup Rust environment
-        uses: ./.github/actions/setup
-        with:
-          rust-version: stable
-          cache-shared-key: ci-e2e-${{ hashFiles('**/Cargo.lock') }}
-          cache-save-if: ${{ github.ref == 'refs/heads/main' }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install s3s-e2e test tool
-        uses: taiki-e/cache-cargo-install-action@v2
-        with:
-          tool: s3s-e2e
-          git: https://github.com/s3s-project/s3s.git
-          rev: 4a04a670cf41274d9be9ab65dc36f4aa3f92fbad
-
-      - name: Build debug binary
-        run: |
-          touch rustfs/build.rs
-          # Limit concurrency to prevent OOM
-          cargo build -p rustfs --bins --jobs 2
-
-      - name: Run end-to-end tests
-        run: |
-          s3s-e2e --version
-          ./scripts/e2e-run.sh ./target/debug/rustfs /tmp/rustfs
-
-      - name: Upload test logs
-        if: failure()
-        uses: actions/upload-artifact@v6
-        with:
-          name: e2e-test-logs-${{ github.run_number }}
-          path: /tmp/rustfs.log
-          retention-days: 3
@@ -1,455 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-# Docker Images Workflow
-#
-# This workflow builds Docker images using pre-built binaries from the build workflow.
-#
-# Trigger Types:
-# 1. workflow_run: Automatically triggered when "Build and Release" workflow completes
-# 2. workflow_dispatch: Manual trigger for standalone Docker builds
-#
-# Key Features:
-# - Only triggers when Linux builds (x86_64 + aarch64) are successful
-# - Independent of macOS/Windows build status
-# - Uses workflow_run event for precise control
-# - Only builds Docker images for releases and prereleases (development builds are skipped)
-
-name: Docker Images
-
-# Permissions needed for workflow_run event and Docker registry access
-permissions:
-  contents: read
-  packages: write
-
-on:
-  # Automatically triggered when build workflow completes
-  workflow_run:
-    workflows: [ "Build and Release" ]
-    types: [ completed ]
-  # Manual trigger with same parameters for consistency
-  workflow_dispatch:
-    inputs:
-      push_images:
-        description: "Push images to registries"
-        required: false
-        default: true
-        type: boolean
-      version:
-        description: "Version to build (latest for stable release, or specific version like v1.0.0, v1.0.0-alpha1)"
-        required: false
-        default: "latest"
-        type: string
-      force_rebuild:
-        description: "Force rebuild even if binary exists (useful for testing)"
-        required: false
-        default: false
-        type: boolean
-
-env:
-  CONCLUSION: ${{ github.event.workflow_run.conclusion }}
-  HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
-  HEAD_SHA: ${{ github.event.workflow_run.head_sha }}
-  TRIGGERING_EVENT: ${{ github.event.workflow_run.event }}
-  DOCKERHUB_USERNAME: rustfs
-  CARGO_TERM_COLOR: always
-  REGISTRY_DOCKERHUB: rustfs/rustfs
-  REGISTRY_GHCR: ghcr.io/${{ github.repository }}
-  DOCKER_PLATFORMS: linux/amd64,linux/arm64
-
-jobs:
-  # Check if we should build Docker images
-  build-check:
-    name: Docker Build Check
-    runs-on: ubicloud-standard-2
-    outputs:
-      should_build: ${{ steps.check.outputs.should_build }}
-      should_push: ${{ steps.check.outputs.should_push }}
-      build_type: ${{ steps.check.outputs.build_type }}
-      version: ${{ steps.check.outputs.version }}
-      short_sha: ${{ steps.check.outputs.short_sha }}
-      is_prerelease: ${{ steps.check.outputs.is_prerelease }}
-      create_latest: ${{ steps.check.outputs.create_latest }}
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-          # For workflow_run events, checkout the specific commit that triggered the workflow
-          ref: ${{ github.event.workflow_run.head_sha || github.sha }}
-
-      - name: Check build conditions
-        id: check
-        run: |
-          should_build=false
-          should_push=false
-          build_type="none"
-          version=""
-          short_sha=""
-          is_prerelease=false
-          create_latest=false
-
-          if [[ "${{ github.event_name }}" == "workflow_run" ]]; then
-            # Triggered by build workflow completion
-            echo "🔗 Triggered by build workflow completion"
-
-            # Check if the triggering workflow was successful
-            # If the workflow succeeded, it means ALL builds (including Linux x86_64 and aarch64) succeeded
-            if [[ "$CONCLUSION" == "success" ]]; then
-              echo "✅ Build workflow succeeded, all builds including Linux are successful"
-              should_build=true
-              should_push=true
-            else
-              echo "❌ Build workflow failed (conclusion: $CONCLUSION), skipping Docker build"
-              should_build=false
-            fi
-
-            # Extract version info from commit message or use commit SHA
-            # Use Git to generate consistent short SHA (ensures uniqueness like build.yml)
-            short_sha=$(git rev-parse --short "$HEAD_SHA")
-
-            # Determine build type based on triggering workflow event and ref
-            triggering_event="$TRIGGERING_EVENT"
-            head_branch="$HEAD_BRANCH"
-
-            echo "🔍 Analyzing triggering workflow:"
-            echo "   📋 Event: $triggering_event"
-            echo "   🌿 Head branch: $head_branch"
-            echo "   📎 Head SHA: $HEAD_SHA"
-
-            # Check if this was triggered by a tag push
-            if [[ "$triggering_event" == "push" ]]; then
-              # For tag pushes, head_branch will be like "refs/tags/v1.0.0" or just "v1.0.0"
-              if [[ "$head_branch" == refs/tags/* ]]; then
-                # Extract tag name from refs/tags/TAG_NAME
-                tag_name="${head_branch#refs/tags/}"
-                version="$tag_name"
-              elif [[ "$head_branch" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+ ]]; then
-                # Direct tag name like "v1.0.0" or "1.0.0-alpha.1"
-                version="$head_branch"
-              elif [[ "$head_branch" == "main" ]]; then
-                # Regular branch push to main
-                build_type="development"
-                version="dev-${short_sha}"
-                should_build=false
-                echo "⏭️  Skipping Docker build for development version (main branch push)"
-              else
-                # Other branch push
-                build_type="development"
-                version="dev-${short_sha}"
-                should_build=false
-                echo "⏭️  Skipping Docker build for development version (branch: $head_branch)"
-              fi
-
-              # If we extracted a version (tag), determine release type
-              if [[ -n "$version" ]] && [[ "$version" != "dev-${short_sha}" ]]; then
-                # Remove 'v' prefix if present for consistent version format
-                if [[ "$version" == v* ]]; then
-                  version="${version#v}"
-                fi
-
-                if [[ "$version" == *"alpha"* ]] || [[ "$version" == *"beta"* ]] || [[ "$version" == *"rc"* ]]; then
-                  build_type="prerelease"
-                  is_prerelease=true
-                  # TODO: Temporary change - currently allows alpha versions to also create latest tags
-                  # After the version is stable, you need to remove the following line and restore the original logic (latest is created only for stable versions)
-                  if [[ "$version" == *"alpha"* ]]; then
-                    create_latest=true
-                     echo "🧪 Building Docker image for prerelease: $version (temporarily allowing creation of latest tag)"
-                  else
-                    echo "🧪 Building Docker image for prerelease: $version"
-                  fi
-                else
-                  build_type="release"
-                  create_latest=true
-                  echo "🚀 Building Docker image for release: $version"
-                fi
-              fi
-            else
-              # Non-push events
-              build_type="development"
-              version="dev-${short_sha}"
-              should_build=false
-              echo "⏭️  Skipping Docker build for development version (event: $triggering_event)"
-            fi
-
-            echo "🔄 Build triggered by workflow_run:"
-            echo "   📋 Conclusion: $CONCLUSION"
-            echo "   🌿 Branch: $HEAD_BRANCH"
-            echo "   📎 SHA: $HEAD_SHA"
-            echo "   🎯 Event: $TRIGGERING_EVENT"
-
-          elif [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
-            # Manual trigger
-            input_version="${{ github.event.inputs.version }}"
-            version="${input_version}"
-            should_push="${{ github.event.inputs.push_images }}"
-            should_build=true
-
-            # Get short SHA
-            short_sha=$(git rev-parse --short HEAD)
-
-            echo "🎯 Manual Docker build triggered:"
-            echo "   📋 Requested version: $input_version"
-            echo "   🔧 Force rebuild: ${{ github.event.inputs.force_rebuild }}"
-            echo "   🚀 Push images: $should_push"
-
-            case "$input_version" in
-              "latest")
-                build_type="release"
-                create_latest=true
-                echo "🚀 Building with latest stable release version"
-                ;;
-              # Prerelease versions (must match first, more specific)
-              v*alpha*|v*beta*|v*rc*|*alpha*|*beta*|*rc*)
-                build_type="prerelease"
-                is_prerelease=true
-                # TODO: Temporary change - currently allows alpha versions to also create latest tags
-                # After the version is stable, you need to remove the if block below and restore the original logic.
-                if [[ "$input_version" == *"alpha"* ]]; then
-                  create_latest=true
-                   echo "🧪 Building with prerelease version: $input_version (temporarily allowing creation of latest tag)"
-                else
-                  echo "🧪 Building with prerelease version: $input_version"
-                fi
-                ;;
-              # Release versions (match after prereleases, more general)
-              v[0-9]*|[0-9]*.*.*)
-                build_type="release"
-                create_latest=true
-                echo "📦 Building with specific release version: $input_version"
-                ;;
-              *)
-                # Invalid version for Docker build
-                should_build=false
-                echo "❌ Invalid version for Docker build: $input_version"
-                echo "⚠️  Only release versions (latest, v1.0.0, 1.0.0) and prereleases (v1.0.0-alpha1, 1.0.0-beta2) are supported"
-                ;;
-            esac
-          fi
-
-          echo "should_build=$should_build" >> $GITHUB_OUTPUT
-          echo "should_push=$should_push" >> $GITHUB_OUTPUT
-          echo "build_type=$build_type" >> $GITHUB_OUTPUT
-          echo "version=$version" >> $GITHUB_OUTPUT
-          echo "short_sha=$short_sha" >> $GITHUB_OUTPUT
-          echo "is_prerelease=$is_prerelease" >> $GITHUB_OUTPUT
-          echo "create_latest=$create_latest" >> $GITHUB_OUTPUT
-
-          echo "🐳 Docker Build Summary:"
-          echo "  - Should build: $should_build"
-          echo "  - Should push: $should_push"
-          echo "  - Build type: $build_type"
-          echo "  - Version: $version"
-          echo "  - Short SHA: $short_sha"
-          echo "  - Is prerelease: $is_prerelease"
-          echo "  - Create latest: $create_latest"
-
-  # Build multi-arch Docker images
-  # Strategy: Build images using pre-built binaries from dl.rustfs.com
-  # Supports both release and dev channel binaries based on build context
-  # Only runs when should_build is true (which includes workflow success check)
-  build-docker:
-    name: Build Docker Images
-    needs: build-check
-    if: needs.build-check.outputs.should_build == 'true'
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 60
-    strategy:
-          fail-fast: false
-          matrix:
-            include:
-              - variant: musl
-                file: Dockerfile
-                suffix: ""
-              - variant: glibc
-                file: Dockerfile.glibc
-                suffix: "-glibc"
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ env.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      # - name: Login to GitHub Container Registry
-      #   uses: docker/login-action@v3
-      #   with:
-      #     registry: ghcr.io
-      #     username: ${{ github.actor }}
-      #     password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Extract metadata and generate tags
-        id: meta
-        run: |
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-          VERSION="${{ needs.build-check.outputs.version }}"
-          SHORT_SHA="${{ needs.build-check.outputs.short_sha }}"
-          CREATE_LATEST="${{ needs.build-check.outputs.create_latest }}"
-          VARIANT_SUFFIX="${{ matrix.suffix }}"
-
-          # Convert version format for Dockerfile compatibility
-          case "$VERSION" in
-            "latest")
-              # For stable latest, use RELEASE=latest + release CHANNEL
-              DOCKER_RELEASE="latest"
-              DOCKER_CHANNEL="release"
-              ;;
-            v*)
-              # For versioned releases (v1.0.0), remove 'v' prefix for Dockerfile
-              DOCKER_RELEASE="${VERSION#v}"
-              DOCKER_CHANNEL="release"
-              ;;
-            *)
-              # For other versions, pass as-is
-              DOCKER_RELEASE="${VERSION}"
-              DOCKER_CHANNEL="release"
-              ;;
-          esac
-
-          echo "docker_release=$DOCKER_RELEASE" >> $GITHUB_OUTPUT
-          echo "docker_channel=$DOCKER_CHANNEL" >> $GITHUB_OUTPUT
-
-          echo "🐳 Docker build parameters:"
-          echo "  - Original version: $VERSION"
-          echo "  - Docker RELEASE: $DOCKER_RELEASE"
-          echo "  - Docker CHANNEL: $DOCKER_CHANNEL"
-
-          # Generate tags based on build type
-          # Only support release and prerelease builds (no development builds)
-          TAGS="${{ env.REGISTRY_DOCKERHUB }}:${VERSION}${VARIANT_SUFFIX}"
-
-          # Add channel tags for prereleases and latest for stable
-          if [[ "$CREATE_LATEST" == "true" ]]; then
-            # TODO: Temporary change - the current alpha version will also create the latest tag
-            # After the version is stabilized, the logic here remains unchanged, but the upstream CREATE_LATEST setting needs to be restored.
-            # Stable release (and temporary alpha versions)
-            TAGS="$TAGS,${{ env.REGISTRY_DOCKERHUB }}:latest${VARIANT_SUFFIX}"
-          elif [[ "$BUILD_TYPE" == "prerelease" ]]; then
-            # Prerelease channel tags (alpha, beta, rc)
-            if [[ "$VERSION" == *"alpha"* ]]; then
-              CHANNEL="alpha"
-            elif [[ "$VERSION" == *"beta"* ]]; then
-              CHANNEL="beta"
-            elif [[ "$VERSION" == *"rc"* ]]; then
-              CHANNEL="rc"
-            fi
-
-            if [[ -n "$CHANNEL" ]]; then
-              TAGS="$TAGS,${{ env.REGISTRY_DOCKERHUB }}:${CHANNEL}${VARIANT_SUFFIX}"
-            fi
-          fi
-
-          # Output tags
-          echo "tags=$TAGS" >> $GITHUB_OUTPUT
-
-          # Generate labels
-          LABELS="org.opencontainers.image.title=RustFS"
-          LABELS="$LABELS,org.opencontainers.image.description=RustFS distributed object storage system"
-          LABELS="$LABELS,org.opencontainers.image.version=$VERSION"
-          LABELS="$LABELS,org.opencontainers.image.revision=${{ github.sha }}"
-          LABELS="$LABELS,org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}"
-          LABELS="$LABELS,org.opencontainers.image.created=$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
-          LABELS="$LABELS,org.opencontainers.image.build-type=$BUILD_TYPE"
-
-          echo "labels=$LABELS" >> $GITHUB_OUTPUT
-
-          echo "🐳 Generated Docker tags:"
-          echo "$TAGS" | tr ',' '\n' | sed 's/^/  - /'
-          echo "📋 Build type: $BUILD_TYPE"
-          echo "🔖 Version: $VERSION"
-
-      - name: Build and push Docker image
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          file: ${{ matrix.file }}
-          platforms: ${{ env.DOCKER_PLATFORMS }}
-          push: ${{ needs.build-check.outputs.should_push == 'true' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: |
-            type=gha,scope=docker-${{ matrix.variant }}
-          cache-to: |
-            type=gha,mode=max,scope=docker-${{ matrix.variant }}
-          build-args: |
-            BUILDTIME=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
-            VERSION=${{ needs.build-check.outputs.version }}
-            BUILD_TYPE=${{ needs.build-check.outputs.build_type }}
-            REVISION=${{ github.sha }}
-            RELEASE=${{ steps.meta.outputs.docker_release }}
-            CHANNEL=${{ steps.meta.outputs.docker_channel }}
-            BUILDKIT_INLINE_CACHE=1
-          # Enable advanced BuildKit features for better performance
-          provenance: false
-          sbom: false
-          # Add retry mechanism by splitting the build process
-          no-cache: false
-          pull: true
-
-  # Note: Manifest creation is no longer needed as we only build one variant
-  # Multi-arch manifests are automatically created by docker/build-push-action
-
-  # Docker build summary
-  docker-summary:
-    name: Docker Build Summary
-    needs: [ build-check, build-docker ]
-    if: always() && needs.build-check.outputs.should_build == 'true'
-    runs-on: ubicloud-standard-2
-    steps:
-      - name: Docker build completion summary
-        run: |
-          BUILD_TYPE="${{ needs.build-check.outputs.build_type }}"
-          VERSION="${{ needs.build-check.outputs.version }}"
-          CREATE_LATEST="${{ needs.build-check.outputs.create_latest }}"
-
-          echo "🐳 Docker build completed successfully!"
-          echo "📦 Build type: $BUILD_TYPE"
-          echo "🔢 Version: $VERSION"
-          echo "🚀 Strategy: Images using pre-built binaries (release channel only)"
-          echo ""
-
-          case "$BUILD_TYPE" in
-            "release")
-              echo "🚀 Release Docker image has been built with ${VERSION} tags"
-              echo "✅ This image is ready for production use"
-              if [[ "$CREATE_LATEST" == "true" ]]; then
-                echo "🏷️  Latest tag has been created for stable release"
-              fi
-              ;;
-            "prerelease")
-              echo "🧪 Prerelease Docker image has been built with ${VERSION} tags"
-              echo "⚠️  This is a prerelease image - use with caution"
-              # TODO: Temporary change - alpha versions currently create the latest tag
-              # After the version is stable, you need to restore the following prompt information
-              if [[ "$VERSION" == *"alpha"* ]] && [[ "$CREATE_LATEST" == "true" ]]; then
-                echo "🏷️  Latest tag has been created for alpha version (temporary measures)"
-              else
-                echo "🚫 Latest tag NOT created for prerelease"
-              fi
-              ;;
-            *)
-              echo "❌ Unexpected build type: $BUILD_TYPE"
-              ;;
-          esac
@@ -1,422 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: e2e-s3tests
-
-on:
-  workflow_dispatch:
-    inputs:
-      test-mode:
-        description: "Test mode to run"
-        required: true
-        type: choice
-        default: "single"
-        options:
-          - single
-          - multi
-      xdist:
-        description: "Enable pytest-xdist (parallel). '0' to disable."
-        required: false
-        default: "0"
-      maxfail:
-        description: "Stop after N failures (debug friendly)"
-        required: false
-        default: "1"
-      markexpr:
-        description: "pytest -m expression (feature filters)"
-        required: false
-        default: "not lifecycle and not versioning and not s3website and not bucket_logging and not encryption"
-
-env:
-  # main user
-  S3_ACCESS_KEY: rustfsadmin
-  S3_SECRET_KEY: rustfsadmin
-  # alt user (must be different from main for many s3-tests)
-  S3_ALT_ACCESS_KEY: rustfsalt
-  S3_ALT_SECRET_KEY: rustfsalt
-
-  S3_REGION: us-east-1
-
-  RUST_LOG: info
-  PLATFORM: linux/amd64
-
-defaults:
-  run:
-    shell: bash
-
-jobs:
-  s3tests-single:
-    if: github.event.inputs.test-mode == 'single'
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 120
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Enable buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Build RustFS image (source, cached)
-        run: |
-          DOCKER_BUILDKIT=1 docker buildx build --load \
-            --platform ${PLATFORM} \
-            --cache-from type=gha \
-            --cache-to type=gha,mode=max \
-            -t rustfs-ci \
-            -f Dockerfile.source .
-
-      - name: Create network
-        run: docker network inspect rustfs-net >/dev/null 2>&1 || docker network create rustfs-net
-
-      - name: Remove existing rustfs-single (if any)
-        run: docker rm -f rustfs-single >/dev/null 2>&1 || true
-
-      - name: Start single RustFS
-        run: |
-          docker run -d --name rustfs-single \
-            --network rustfs-net \
-            -p 9000:9000 \
-            -e RUSTFS_ADDRESS=0.0.0.0:9000 \
-            -e RUSTFS_ACCESS_KEY=$S3_ACCESS_KEY \
-            -e RUSTFS_SECRET_KEY=$S3_SECRET_KEY \
-            -e RUSTFS_VOLUMES="/data/rustfs0 /data/rustfs1 /data/rustfs2 /data/rustfs3" \
-            -v /tmp/rustfs-single:/data \
-            rustfs-ci
-
-      - name: Wait for RustFS ready
-        run: |
-          for i in {1..60}; do
-            if curl -sf http://127.0.0.1:9000/health >/dev/null 2>&1; then
-              echo "RustFS is ready"
-              exit 0
-            fi
-
-            if [ "$(docker inspect -f '{{.State.Running}}' rustfs-single 2>/dev/null)" != "true" ]; then
-              echo "RustFS container not running" >&2
-              docker logs rustfs-single || true
-              exit 1
-            fi
-
-            sleep 2
-          done
-
-          echo "Health check timed out" >&2
-          docker logs rustfs-single || true
-          exit 1
-
-      - name: Generate s3tests config
-        run: |
-          export S3_HOST=127.0.0.1
-          envsubst < .github/s3tests/s3tests.conf > s3tests.conf
-
-      - name: Provision s3-tests alt user (required by suite)
-        run: |
-          python3 -m pip install --user --upgrade pip awscurl
-          export PATH="$HOME/.local/bin:$PATH"
-
-          # Admin API requires AWS SigV4 signing. awscurl is used by RustFS codebase as well.
-          awscurl \
-            --service s3 \
-            --region "${S3_REGION}" \
-            --access_key "${S3_ACCESS_KEY}" \
-            --secret_key "${S3_SECRET_KEY}" \
-            -X PUT \
-            -H 'Content-Type: application/json' \
-            -d '{"secretKey":"'"${S3_ALT_SECRET_KEY}"'","status":"enabled","policy":"readwrite"}' \
-            "http://127.0.0.1:9000/rustfs/admin/v3/add-user?accessKey=${S3_ALT_ACCESS_KEY}"
-
-          # Explicitly attach built-in policy via policy mapping.
-          # s3-tests relies on alt client being able to ListBuckets during setup cleanup.
-          awscurl \
-            --service s3 \
-            --region "${S3_REGION}" \
-            --access_key "${S3_ACCESS_KEY}" \
-            --secret_key "${S3_SECRET_KEY}" \
-            -X PUT \
-            "http://127.0.0.1:9000/rustfs/admin/v3/set-user-or-group-policy?policyName=readwrite&userOrGroup=${S3_ALT_ACCESS_KEY}&isGroup=false"
-
-          # Sanity check: alt user can list buckets (should not be AccessDenied).
-          awscurl \
-            --service s3 \
-            --region "${S3_REGION}" \
-            --access_key "${S3_ALT_ACCESS_KEY}" \
-            --secret_key "${S3_ALT_SECRET_KEY}" \
-            -X GET \
-            "http://127.0.0.1:9000/" >/dev/null
-
-      - name: Prepare s3-tests
-        run: |
-          python3 -m pip install --user --upgrade pip tox
-          export PATH="$HOME/.local/bin:$PATH"
-          git clone --depth 1 https://github.com/ceph/s3-tests.git s3-tests
-
-      - name: Run ceph s3-tests (debug friendly)
-        run: |
-          export PATH="$HOME/.local/bin:$PATH"
-          mkdir -p artifacts/s3tests-single
-
-          cd s3-tests
-
-          set -o pipefail
-
-          MAXFAIL="${{ github.event.inputs.maxfail }}"
-          if [ -z "$MAXFAIL" ]; then MAXFAIL="1"; fi
-
-          MARKEXPR="${{ github.event.inputs.markexpr }}"
-          if [ -z "$MARKEXPR" ]; then MARKEXPR="not lifecycle and not versioning and not s3website and not bucket_logging and not encryption"; fi
-
-          XDIST="${{ github.event.inputs.xdist }}"
-          if [ -z "$XDIST" ]; then XDIST="0"; fi
-          XDIST_ARGS=""
-          if [ "$XDIST" != "0" ]; then
-            # Add pytest-xdist to requirements.txt so tox installs it inside
-            # its virtualenv. Installing outside tox does NOT work.
-            echo "pytest-xdist" >> requirements.txt
-            XDIST_ARGS="-n $XDIST --dist=loadgroup"
-          fi
-
-          # Run tests from s3tests/functional (boto2+boto3 combined directory).
-          S3TEST_CONF=${GITHUB_WORKSPACE}/s3tests.conf \
-            tox -- \
-              -vv -ra --showlocals --tb=long \
-              --maxfail="$MAXFAIL" \
-              --junitxml=${GITHUB_WORKSPACE}/artifacts/s3tests-single/junit.xml \
-              $XDIST_ARGS \
-              s3tests/functional/test_s3.py \
-              -m "$MARKEXPR" \
-              2>&1 | tee ${GITHUB_WORKSPACE}/artifacts/s3tests-single/pytest.log
-
-      - name: Collect RustFS logs
-        if: always()
-        run: |
-          mkdir -p artifacts/rustfs-single
-          docker logs rustfs-single > artifacts/rustfs-single/rustfs.log 2>&1 || true
-          docker inspect rustfs-single > artifacts/rustfs-single/inspect.json || true
-
-      - name: Upload artifacts
-        if: always() && env.ACT != 'true'
-        uses: actions/upload-artifact@v6
-        with:
-          name: s3tests-single
-          path: artifacts/**
-
-  s3tests-multi:
-    if: github.event_name == 'workflow_dispatch' && github.event.inputs.test-mode == 'multi'
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 150
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Enable buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Build RustFS image (source, cached)
-        run: |
-          DOCKER_BUILDKIT=1 docker buildx build --load \
-            --platform ${PLATFORM} \
-            --cache-from type=gha \
-            --cache-to type=gha,mode=max \
-            -t rustfs-ci \
-            -f Dockerfile.source .
-
-      - name: Prepare cluster compose
-        run: |
-          cat > compose.yml <<'EOF'
-          services:
-            rustfs1:
-              image: rustfs-ci
-              hostname: rustfs1
-              networks: [rustfs-net]
-              environment:
-                RUSTFS_ADDRESS: "0.0.0.0:9000"
-                RUSTFS_ACCESS_KEY: ${S3_ACCESS_KEY}
-                RUSTFS_SECRET_KEY: ${S3_SECRET_KEY}
-                RUSTFS_VOLUMES: "/data/rustfs0 /data/rustfs1 /data/rustfs2 /data/rustfs3"
-              volumes:
-                - rustfs1-data:/data
-            rustfs2:
-              image: rustfs-ci
-              hostname: rustfs2
-              networks: [rustfs-net]
-              environment:
-                RUSTFS_ADDRESS: "0.0.0.0:9000"
-                RUSTFS_ACCESS_KEY: ${S3_ACCESS_KEY}
-                RUSTFS_SECRET_KEY: ${S3_SECRET_KEY}
-                RUSTFS_VOLUMES: "/data/rustfs0 /data/rustfs1 /data/rustfs2 /data/rustfs3"
-              volumes:
-                - rustfs2-data:/data
-            rustfs3:
-              image: rustfs-ci
-              hostname: rustfs3
-              networks: [rustfs-net]
-              environment:
-                RUSTFS_ADDRESS: "0.0.0.0:9000"
-                RUSTFS_ACCESS_KEY: ${S3_ACCESS_KEY}
-                RUSTFS_SECRET_KEY: ${S3_SECRET_KEY}
-                RUSTFS_VOLUMES: "/data/rustfs0 /data/rustfs1 /data/rustfs2 /data/rustfs3"
-              volumes:
-                - rustfs3-data:/data
-            rustfs4:
-              image: rustfs-ci
-              hostname: rustfs4
-              networks: [rustfs-net]
-              environment:
-                RUSTFS_ADDRESS: "0.0.0.0:9000"
-                RUSTFS_ACCESS_KEY: ${S3_ACCESS_KEY}
-                RUSTFS_SECRET_KEY: ${S3_SECRET_KEY}
-                RUSTFS_VOLUMES: "/data/rustfs0 /data/rustfs1 /data/rustfs2 /data/rustfs3"
-              volumes:
-                - rustfs4-data:/data
-            lb:
-              image: haproxy:2.9
-              hostname: lb
-              networks: [rustfs-net]
-              ports:
-                - "9000:9000"
-              volumes:
-                - ./haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
-          networks:
-            rustfs-net:
-              name: rustfs-net
-          volumes:
-            rustfs1-data:
-            rustfs2-data:
-            rustfs3-data:
-            rustfs4-data:
-          EOF
-
-          cat > haproxy.cfg <<'EOF'
-          defaults
-            mode http
-            timeout connect 5s
-            timeout client  30s
-            timeout server  30s
-
-          frontend fe_s3
-            bind *:9000
-            default_backend be_s3
-
-          backend be_s3
-            balance roundrobin
-            server s1 rustfs1:9000 check
-            server s2 rustfs2:9000 check
-            server s3 rustfs3:9000 check
-            server s4 rustfs4:9000 check
-          EOF
-
-      - name: Launch cluster
-        run: docker compose -f compose.yml up -d
-
-      - name: Wait for LB ready
-        run: |
-          for i in {1..90}; do
-            if curl -sf http://127.0.0.1:9000/health >/dev/null 2>&1; then
-              echo "Load balancer is ready"
-              exit 0
-            fi
-            sleep 2
-          done
-          echo "LB or backend not ready" >&2
-          docker compose -f compose.yml logs --tail=200 || true
-          exit 1
-
-      - name: Generate s3tests config
-        run: |
-          export S3_HOST=127.0.0.1
-          envsubst < .github/s3tests/s3tests.conf > s3tests.conf
-
-      - name: Provision s3-tests alt user (required by suite)
-        run: |
-          python3 -m pip install --user --upgrade pip awscurl
-          export PATH="$HOME/.local/bin:$PATH"
-
-          awscurl \
-            --service s3 \
-            --region "${S3_REGION}" \
-            --access_key "${S3_ACCESS_KEY}" \
-            --secret_key "${S3_SECRET_KEY}" \
-            -X PUT \
-            -H 'Content-Type: application/json' \
-            -d '{"secretKey":"'"${S3_ALT_SECRET_KEY}"'","status":"enabled","policy":"readwrite"}' \
-            "http://127.0.0.1:9000/rustfs/admin/v3/add-user?accessKey=${S3_ALT_ACCESS_KEY}"
-
-          awscurl \
-            --service s3 \
-            --region "${S3_REGION}" \
-            --access_key "${S3_ACCESS_KEY}" \
-            --secret_key "${S3_SECRET_KEY}" \
-            -X PUT \
-            "http://127.0.0.1:9000/rustfs/admin/v3/set-user-or-group-policy?policyName=readwrite&userOrGroup=${S3_ALT_ACCESS_KEY}&isGroup=false"
-
-          awscurl \
-            --service s3 \
-            --region "${S3_REGION}" \
-            --access_key "${S3_ALT_ACCESS_KEY}" \
-            --secret_key "${S3_ALT_SECRET_KEY}" \
-            -X GET \
-            "http://127.0.0.1:9000/" >/dev/null
-
-      - name: Prepare s3-tests
-        run: |
-          python3 -m pip install --user --upgrade pip tox
-          export PATH="$HOME/.local/bin:$PATH"
-          git clone --depth 1 https://github.com/ceph/s3-tests.git s3-tests
-
-      - name: Run ceph s3-tests (multi, debug friendly)
-        run: |
-          export PATH="$HOME/.local/bin:$PATH"
-          mkdir -p artifacts/s3tests-multi
-
-          cd s3-tests
-
-          set -o pipefail
-
-          MAXFAIL="${{ github.event.inputs.maxfail }}"
-          if [ -z "$MAXFAIL" ]; then MAXFAIL="1"; fi
-
-          MARKEXPR="${{ github.event.inputs.markexpr }}"
-          if [ -z "$MARKEXPR" ]; then MARKEXPR="not lifecycle and not versioning and not s3website and not bucket_logging and not encryption"; fi
-
-          XDIST="${{ github.event.inputs.xdist }}"
-          if [ -z "$XDIST" ]; then XDIST="0"; fi
-          XDIST_ARGS=""
-          if [ "$XDIST" != "0" ]; then
-            # Add pytest-xdist to requirements.txt so tox installs it inside
-            # its virtualenv. Installing outside tox does NOT work.
-            echo "pytest-xdist" >> requirements.txt
-            XDIST_ARGS="-n $XDIST --dist=loadgroup"
-          fi
-
-          # Run tests from s3tests/functional (boto2+boto3 combined directory).
-          S3TEST_CONF=${GITHUB_WORKSPACE}/s3tests.conf \
-            tox -- \
-              -vv -ra --showlocals --tb=long \
-              --maxfail="$MAXFAIL" \
-              --junitxml=${GITHUB_WORKSPACE}/artifacts/s3tests-multi/junit.xml \
-              $XDIST_ARGS \
-              s3tests/functional/test_s3.py \
-              -m "$MARKEXPR" \
-              2>&1 | tee ${GITHUB_WORKSPACE}/artifacts/s3tests-multi/pytest.log
-
-      - name: Collect logs
-        if: always()
-        run: |
-          mkdir -p artifacts/cluster
-          docker compose -f compose.yml logs --no-color > artifacts/cluster/cluster.log 2>&1 || true
-
-      - name: Upload artifacts
-        if: always() && env.ACT != 'true'
-        uses: actions/upload-artifact@v6
-        with:
-          name: s3tests-multi
-          path: artifacts/**
@@ -1,94 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: Publish helm chart to artifacthub
-
-on:
-  workflow_run:
-    workflows: [ "Build and Release" ]
-    types: [ completed ]
-
-permissions:
-  contents: read
-
-env:
-  new_version: ${{ github.event.workflow_run.head_branch }}
-
-jobs:
-  build-helm-package:
-    runs-on: ubicloud-standard-2
-    # Only run on successful builds triggered by tag pushes (version format: x.y.z or x.y.z-suffix)
-    if: |
-      github.event.workflow_run.conclusion == 'success' && 
-      github.event.workflow_run.event == 'push' &&
-      contains(github.event.workflow_run.head_branch, '.')
-
-    steps:
-      - name: Checkout helm chart repo
-        uses: actions/checkout@v6
-
-      - name: Replace chart app version
-        run: |
-          set -e
-          set -x
-          old_version=$(grep "^appVersion:" helm/rustfs/Chart.yaml | awk '{print $2}')
-          sed -i "s/$old_version/$new_version/g" helm/rustfs/Chart.yaml
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v4.3.0
-
-      - name: Package Helm Chart
-        run: |
-          cp helm/README.md helm/rustfs/
-          package_version=$(echo $new_version | awk -F '-' '{print $2}' | awk -F '.' '{print $NF}') 
-          helm package ./helm/rustfs --destination helm/rustfs/ --version "0.0.$package_version"
-
-      - name: Upload helm package as artifact
-        uses: actions/upload-artifact@v6
-        with:
-          name: helm-package
-          path: helm/rustfs/*.tgz
-          retention-days: 1
-
-  publish-helm-package:
-    runs-on: ubicloud-standard-2
-    needs: [ build-helm-package ]
-
-    steps:
-      - name: Checkout helm package repo
-        uses: actions/checkout@v6
-        with:
-          repository: rustfs/helm
-          token: ${{ secrets.RUSTFS_HELM_PACKAGE }}
-
-      - name: Download helm package
-        uses: actions/download-artifact@v7
-        with:
-          name: helm-package
-          path: ./
-
-      - name: Set up helm
-        uses: azure/setup-helm@v4.3.0
-
-      - name: Generate index
-        run: helm repo index . --url https://charts.rustfs.com
-
-      - name: Push helm package and index file
-        run: |
-          git config --global user.name "${{ secrets.USERNAME }}"
-          git config --global user.email "${{ secrets.EMAIL_ADDRESS }}"
-          git status .
-          git add .
-          git commit -m "Update rustfs helm package with $new_version."
-          git push origin main
@@ -1,36 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: "issue-translator"
-on:
-  issue_comment:
-    types: [ created ]
-  issues:
-    types: [ opened ]
-
-permissions:
-  contents: read
-  issues: write
-
-jobs:
-  build:
-    runs-on: ubicloud-standard-4
-    steps:
-      - uses: usthe/issues-translate-action@v2.7
-        with:
-          IS_MODIFY_TITLE: false
-          # not require, default false, . Decide whether to modify the issue title
-          # if true, the robot account @Issues-translate-bot must have modification permissions, invite @Issues-translate-bot to your project or use your custom bot.
-          CUSTOM_BOT_NOTE: Bot detected the issue body's language is not English, translate it automatically.
-          # not require. Customize the translation robot prefix message.
@@ -1,142 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: Performance Testing
-
-on:
-  push:
-    branches: [ main ]
-    paths:
-      - "**/*.rs"
-      - "**/Cargo.toml"
-      - "**/Cargo.lock"
-      - ".github/workflows/performance.yml"
-  workflow_dispatch:
-    inputs:
-      profile_duration:
-        description: "Profiling duration in seconds"
-        required: false
-        default: "120"
-        type: string
-
-permissions:
-  contents: read
-
-env:
-  CARGO_TERM_COLOR: always
-  RUST_BACKTRACE: 1
-
-jobs:
-  performance-profile:
-    name: Performance Profiling
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 30
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Setup Rust environment
-        uses: ./.github/actions/setup
-        with:
-          rust-version: nightly
-          cache-shared-key: perf-${{ hashFiles('**/Cargo.lock') }}
-          cache-save-if: ${{ github.ref == 'refs/heads/main' }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install additional nightly components
-        run: rustup component add llvm-tools-preview
-
-      - name: Install samply profiler
-        uses: taiki-e/cache-cargo-install-action@v2
-        with:
-          tool: samply
-
-      - name: Configure kernel for profiling
-        run: echo '1' | sudo tee /proc/sys/kernel/perf_event_paranoid
-
-      - name: Prepare test environment
-        run: |
-          # Create test volumes
-          for i in {0..4}; do
-            mkdir -p ./target/volume/test$i
-          done
-
-          # Set environment variables
-          echo "RUSTFS_VOLUMES=./target/volume/test{0...4}" >> $GITHUB_ENV
-          echo "RUST_LOG=rustfs=info,ecstore=info,s3s=info,iam=info,rustfs-obs=info" >> $GITHUB_ENV
-
-      - name: Verify console static assets
-        run: |
-          # Console static assets are already embedded in the repository
-          echo "Console static assets size: $(du -sh rustfs/static/)"
-          echo "Console static assets are embedded via rust-embed, no external download needed"
-
-      - name: Build with profiling optimizations
-        run: |
-          RUSTFLAGS="-C force-frame-pointers=yes -C debug-assertions=off" \
-          cargo +nightly build --profile profiling -p rustfs --bins
-
-      - name: Run performance profiling
-        id: profiling
-        run: |
-          DURATION="${{ github.event.inputs.profile_duration || '120' }}"
-          echo "Running profiling for ${DURATION} seconds..."
-
-          timeout "${DURATION}s" samply record \
-            --output samply-profile.json \
-            ./target/profiling/rustfs ${RUSTFS_VOLUMES} || true
-
-          if [ -f "samply-profile.json" ]; then
-            echo "profile_generated=true" >> $GITHUB_OUTPUT
-            echo "Profile generated successfully"
-          else
-            echo "profile_generated=false" >> $GITHUB_OUTPUT
-            echo "::warning::Profile data not generated"
-          fi
-
-      - name: Upload profile data
-        if: steps.profiling.outputs.profile_generated == 'true'
-        uses: actions/upload-artifact@v6
-        with:
-          name: performance-profile-${{ github.run_number }}
-          path: samply-profile.json
-          retention-days: 30
-
-  benchmark:
-    name: Benchmark Tests
-    runs-on: ubicloud-standard-2
-    timeout-minutes: 45
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v6
-
-      - name: Setup Rust environment
-        uses: ./.github/actions/setup
-        with:
-          rust-version: stable
-          cache-shared-key: bench-${{ hashFiles('**/Cargo.lock') }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          cache-save-if: ${{ github.ref == 'refs/heads/main' }}
-
-      - name: Run benchmarks
-        run: |
-          cargo bench --package ecstore --bench comparison_benchmark -- --output-format json | \
-          tee benchmark-results.json
-
-      - name: Upload benchmark results
-        uses: actions/upload-artifact@v6
-        with:
-          name: benchmark-results-${{ github.run_number }}
-          path: benchmark-results.json
-          retention-days: 7
@@ -1,20 +0,0 @@
-name: "Mark stale issues"
-on:
-  schedule:
-    - cron: "30 1 * * *"
-
-jobs:
-  stale:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/stale@v9
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          stale-issue-message: 'This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.'
-          stale-issue-label: 'stale'
-          ## Mark if there is no activity for more than 7 days
-          days-before-stale: 7  
-          # If no one responds after 3 days, the tag will be closed.
-          days-before-close: 3   
-          # These tags are exempt and will not close automatically.
-          exempt-issue-labels: 'pinned,security'
@@ -1,42 +0,0 @@
-/target
-.DS_Store
-.idea
-.vscode
-.direnv/
-/test
-/logs
-/data
-/docs
-/rustfs-data/
-.devcontainer
-rustfs/static/*
-!rustfs/static/.gitkeep
-vendor
-cli/rustfs-gui/embedded-rustfs/rustfs
-*.log
-deploy/certs/*
-*jsonl
-.env
-.rustfs.sys
-.cargo
-profile.json
-.docker/openobserve-otel/data
-*.zst
-.secrets
-*.go
-*.pb
-*.svg
-deploy/logs/*.log.*
-artifacts/
-# s3-tests local artifacts (root directory only)
-/s3-tests/
-/s3-tests-local/
-/s3tests.conf
-/s3tests.conf.*
-*.events
-*.audit
-*.snappy
-PR_DESCRIPTION.md
-IMPLEMENTATION_PLAN.md
-scripts/s3-tests/selected_tests.txt
-docs
@@ -1,32 +0,0 @@
-# See https://pre-commit.com for more information
-# See https://pre-commit.com/hooks.html for more hooks
-repos:
-  - repo: local
-    hooks:
-      - id: cargo-fmt
-        name: cargo fmt
-        entry: cargo fmt --all --check
-        language: system
-        types: [rust]
-        pass_filenames: false
-
-      - id: cargo-clippy
-        name: cargo clippy
-        entry: cargo clippy --all-targets --all-features -- -D warnings
-        language: system
-        types: [rust]
-        pass_filenames: false
-
-      - id: cargo-check
-        name: cargo check
-        entry: cargo check --all-targets
-        language: system
-        types: [rust]
-        pass_filenames: false
-
-      - id: cargo-test
-        name: cargo test
-        entry: bash -c 'cargo test --workspace --exclude e2e_test && cargo test --all --doc'
-        language: system
-        types: [rust]
-        pass_filenames: false
@@ -1,702 +0,0 @@
-# RustFS Project AI Coding Rules
-
-## 🚨🚨🚨 CRITICAL DEVELOPMENT RULES - ZERO TOLERANCE 🚨🚨🚨
-
-### ⛔️ ABSOLUTE PROHIBITION: NEVER COMMIT DIRECTLY TO MASTER/MAIN BRANCH ⛔️
-
-**🔥 THIS IS THE MOST CRITICAL RULE - VIOLATION WILL RESULT IN IMMEDIATE REVERSAL 🔥**
-
- **🚫 ZERO DIRECT COMMITS TO MAIN/MASTER BRANCH - ABSOLUTELY FORBIDDEN**
- **🚫 ANY DIRECT COMMIT TO MAIN BRANCH MUST BE IMMEDIATELY REVERTED**
- **🚫 NO EXCEPTIONS FOR HOTFIXES, EMERGENCIES, OR URGENT CHANGES**
- **🚫 NO EXCEPTIONS FOR SMALL CHANGES, TYPOS, OR DOCUMENTATION UPDATES**
- **🚫 NO EXCEPTIONS FOR ANYONE - MAINTAINERS, CONTRIBUTORS, OR ADMINS**
-
-### 📋 MANDATORY WORKFLOW - STRICTLY ENFORCED
-
-**EVERY SINGLE CHANGE MUST FOLLOW THIS WORKFLOW:**
-
-1. **Check current branch**: `git branch` (MUST NOT be on main/master)
-2. **Switch to main**: `git checkout main`
-3. **Pull latest**: `git pull origin main`
-4. **Create feature branch**: `git checkout -b feat/your-feature-name`
-5. **Make changes ONLY on feature branch**
-6. **Test thoroughly before committing**
-7. **Commit and push to feature branch**: `git push origin feat/your-feature-name`
-8. **Create Pull Request**: Use `gh pr create` (MANDATORY)
-9. **Wait for PR approval**: NO self-merging allowed
-10. **Merge through GitHub interface**: ONLY after approval
-
-### 🔒 ENFORCEMENT MECHANISMS
-
- **Branch protection rules**: Main branch is protected
- **Pre-commit hooks**: Will block direct commits to main
- **CI/CD checks**: All PRs must pass before merging
- **Code review requirement**: At least one approval needed
- **Automated reversal**: Direct commits to main will be automatically reverted
-
-## 🎯 Core AI Development Principles
-
-### Five Execution Steps
-
-#### 1. Task Analysis and Planning
- **Clear Objectives**: Deeply understand task requirements and expected results before starting coding
- **Plan Development**: List specific files, components, and functions that need modification, explaining the reasons for changes
- **Risk Assessment**: Evaluate the impact of changes on existing functionality, develop rollback plans
-
-#### 2. Precise Code Location
- **File Identification**: Determine specific files and line numbers that need modification
- **Impact Analysis**: Avoid modifying irrelevant files, clearly state the reason for each file modification
- **Minimization Principle**: Unless explicitly required by the task, do not create new abstraction layers or refactor existing code
-
-#### 3. Minimal Code Changes
- **Focus on Core**: Only write code directly required by the task
- **Avoid Redundancy**: Do not add unnecessary logs, comments, tests, or error handling
- **Isolation**: Ensure new code does not interfere with existing functionality, maintain code independence
-
-#### 4. Strict Code Review
- **Correctness Check**: Verify the correctness and completeness of code logic
- **Style Consistency**: Ensure code conforms to established project coding style
- **Side Effect Assessment**: Evaluate the impact of changes on downstream systems
-
-#### 5. Clear Delivery Documentation
- **Change Summary**: Detailed explanation of all modifications and reasons
- **File List**: List all modified files and their specific changes
- **Risk Statement**: Mark any assumptions or potential risk points
-
-### Core Principles
- **🎯 Precise Execution**: Strictly follow task requirements, no arbitrary innovation
- **⚡ Efficient Development**: Avoid over-design, only do necessary work
- **🛡️ Safe and Reliable**: Always follow development processes, ensure code quality and system stability
- **🔒 Cautious Modification**: Only modify when clearly knowing what needs to be changed and having confidence
-
-### Additional AI Behavior Rules
-
-1. **Use English for all code comments and documentation** - All comments, variable names, function names, documentation, and user-facing text in code should be in English
-2. **Clean up temporary scripts after use** - Any temporary scripts, test files, or helper files created during AI work should be removed after task completion
-3. **Only make confident modifications** - Do not make speculative changes or "convenient" modifications outside the task scope. If uncertain about a change, ask for clarification rather than guessing
-
-## Project Overview
-
-RustFS is a high-performance distributed object storage system written in Rust, compatible with S3 API. The project adopts a modular architecture, supporting erasure coding storage, multi-tenant management, observability, and other enterprise-level features.
-
-## Core Architecture Principles
-
-### 1. Modular Design
-
- Project uses Cargo workspace structure, containing multiple independent crates
- Core modules: `rustfs` (main service), `ecstore` (erasure coding storage), `common` (shared components)
- Functional modules: `iam` (identity management), `madmin` (management interface), `crypto` (encryption), etc.
- Tool modules: `cli` (command line tool), `crates/*` (utility libraries)
-
-### 2. Asynchronous Programming Pattern
-
- Comprehensive use of `tokio` async runtime
- Prioritize `async/await` syntax
- Use `async-trait` for async methods in traits
- Avoid blocking operations, use `spawn_blocking` when necessary
-
-### 3. Error Handling Strategy
-
- **Use modular, type-safe error handling with `thiserror`**
- Each module should define its own error type using `thiserror::Error` derive macro
- Support error chains and context information through `#[from]` and `#[source]` attributes
- Use `Result<T>` type aliases for consistency within each module
- Error conversion between modules should use explicit `From` implementations
- Follow the pattern: `pub type Result<T> = core::result::Result<T, Error>`
- Use `#[error("description")]` attributes for clear error messages
- Support error downcasting when needed through `other()` helper methods
- Implement `Clone` for errors when required by the domain logic
-
-## Code Style Guidelines
-
-### 1. Formatting Configuration
-
-```toml
-max_width = 130
-fn_call_width = 90
-single_line_let_else_max_width = 100
-```
-
-### 2. **🔧 MANDATORY Code Formatting Rules**
-
-**CRITICAL**: All code must be properly formatted before committing. This project enforces strict formatting standards to maintain code consistency and readability.
-
-#### Pre-commit Requirements (MANDATORY)
-
-Before every commit, you **MUST**:
-
-1. **Format your code**:
-   ```bash
-   cargo fmt --all
-   ```
-
-2. **Verify formatting**:
-   ```bash
-   cargo fmt --all --check
-   ```
-
-3. **Pass clippy checks**:
-   ```bash
-   cargo clippy --all-targets --all-features -- -D warnings
-   ```
-
-4. **Ensure compilation**:
-   ```bash
-   cargo check --all-targets
-   ```
-
-#### Quick Commands
-
-Use these convenient Makefile targets for common tasks:
-
-```bash
-# Format all code
-make fmt
-
-# Check if code is properly formatted
-make fmt-check
-
-# Run clippy checks
-make clippy
-
-# Run compilation check
-make check
-
-# Run tests
-make test
-
-# Run all pre-commit checks (format + clippy + check + test)
-make pre-commit
-
-# Setup git hooks (one-time setup)
-make setup-hooks
-```
-
-### 3. Naming Conventions
-
- Use `snake_case` for functions, variables, modules
- Use `PascalCase` for types, traits, enums
- Constants use `SCREAMING_SNAKE_CASE`
- Global variables prefix `GLOBAL_`, e.g., `GLOBAL_Endpoints`
- Use meaningful and descriptive names for variables, functions, and methods
- Avoid meaningless names like `temp`, `data`, `foo`, `bar`, `test123`
- Choose names that clearly express the purpose and intent
-
-### 4. Type Declaration Guidelines
-
- **Prefer type inference over explicit type declarations** when the type is obvious from context
- Let the Rust compiler infer types whenever possible to reduce verbosity and improve maintainability
- Only specify types explicitly when:
-  - The type cannot be inferred by the compiler
-  - Explicit typing improves code clarity and readability
-  - Required for API boundaries (function signatures, public struct fields)
-  - Needed to resolve ambiguity between multiple possible types
-
-### 5. Documentation Comments
-
- Public APIs must have documentation comments
- Use `///` for documentation comments
- Complex functions add `# Examples` and `# Parameters` descriptions
- Error cases use `# Errors` descriptions
- Always use English for all comments and documentation
- Avoid meaningless comments like "debug 111" or placeholder text
-
-### 6. Import Guidelines
-
- Standard library imports first
- Third-party crate imports in the middle
- Project internal imports last
- Group `use` statements with blank lines between groups
-
-## Asynchronous Programming Guidelines
-
-### 1. Trait Definition
-
-```rust
-#[async_trait::async_trait]
-pub trait StorageAPI: Send + Sync {
-    async fn get_object(&self, bucket: &str, object: &str) -> Result<ObjectInfo>;
-}
-```
-
-### 2. Error Handling
-
-```rust
-// Use ? operator to propagate errors
-async fn example_function() -> Result<()> {
-    let data = read_file("path").await?;
-    process_data(data).await?;
-    Ok(())
-}
-```
-
-### 3. Concurrency Control
-
- Use `Arc` and `Mutex`/`RwLock` for shared state management
- Prioritize async locks from `tokio::sync`
- Avoid holding locks for long periods
-
-## Logging and Tracing Guidelines
-
-### 1. Tracing Usage
-
-```rust
-#[tracing::instrument(skip(self, data))]
-async fn process_data(&self, data: &[u8]) -> Result<()> {
-    info!("Processing {} bytes", data.len());
-    // Implementation logic
-}
-```
-
-### 2. Log Levels
-
- `error!`: System errors requiring immediate attention
- `warn!`: Warning information that may affect functionality
- `info!`: Important business information
- `debug!`: Debug information for development use
- `trace!`: Detailed execution paths
-
-### 3. Structured Logging
-
-```rust
-info!(
-    counter.rustfs_api_requests_total = 1_u64,
-    key_request_method = %request.method(),
-    key_request_uri_path = %request.uri().path(),
-    "API request processed"
-);
-```
-
-## Error Handling Guidelines
-
-### 1. Error Type Definition
-
-```rust
-// Use thiserror for module-specific error types
-#[derive(thiserror::Error, Debug)]
-pub enum MyError {
-    #[error("IO error: {0}")]
-    Io(#[from] std::io::Error),
-
-    #[error("Storage error: {0}")]
-    Storage(#[from] ecstore::error::StorageError),
-
-    #[error("Custom error: {message}")]
-    Custom { message: String },
-
-    #[error("File not found: {path}")]
-    FileNotFound { path: String },
-
-    #[error("Invalid configuration: {0}")]
-    InvalidConfig(String),
-}
-
-// Provide Result type alias for the module
-pub type Result<T> = core::result::Result<T, MyError>;
-```
-
-### 2. Error Helper Methods
-
-```rust
-impl MyError {
-    /// Create error from any compatible error type
-    pub fn other<E>(error: E) -> Self
-    where
-        E: Into<Box<dyn std::error::Error + Send + Sync>>,
-    {
-        MyError::Io(std::io::Error::other(error))
-    }
-}
-```
-
-### 3. Error Context and Propagation
-
-```rust
-// Use ? operator for clean error propagation
-async fn example_function() -> Result<()> {
-    let data = read_file("path").await?;
-    process_data(data).await?;
-    Ok(())
-}
-
-// Add context to errors
-fn process_with_context(path: &str) -> Result<()> {
-    std::fs::read(path)
-        .map_err(|e| MyError::Custom {
-            message: format!("Failed to read {}: {}", path, e)
-        })?;
-    Ok(())
-}
-```
-
-## Performance Optimization Guidelines
-
-### 1. Memory Management
-
- Use `Bytes` instead of `Vec<u8>` for zero-copy operations
- Avoid unnecessary cloning, use reference passing
- Use `Arc` for sharing large objects
-
-### 2. Concurrency Optimization
-
-```rust
-// Use join_all for concurrent operations
-let futures = disks.iter().map(|disk| disk.operation());
-let results = join_all(futures).await;
-```
-
-### 3. Caching Strategy
-
- Use `LazyLock` for global caching
- Implement LRU cache to avoid memory leaks
-
-## Testing Guidelines
-
-### 1. Unit Tests
-
-```rust
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use test_case::test_case;
-
-    #[tokio::test]
-    async fn test_async_function() {
-        let result = async_function().await;
-        assert!(result.is_ok());
-    }
-
-    #[test_case("input1", "expected1")]
-    #[test_case("input2", "expected2")]
-    fn test_with_cases(input: &str, expected: &str) {
-        assert_eq!(function(input), expected);
-    }
-}
-```
-
-### 2. Integration Tests
-
- Use `e2e_test` module for end-to-end testing
- Simulate real storage environments
-
-### 3. Test Quality Standards
-
- Write meaningful test cases that verify actual functionality
- Avoid placeholder or debug content like "debug 111", "test test", etc.
- Use descriptive test names that clearly indicate what is being tested
- Each test should have a clear purpose and verify specific behavior
- Test data should be realistic and representative of actual use cases
-
-## Cross-Platform Compatibility Guidelines
-
-### 1. CPU Architecture Compatibility
-
- **Always consider multi-platform and different CPU architecture compatibility** when writing code
- Support major architectures: x86_64, aarch64 (ARM64), and other target platforms
- Use conditional compilation for architecture-specific code:
-
-```rust
-#[cfg(target_arch = "x86_64")]
-fn optimized_x86_64_function() { /* x86_64 specific implementation */ }
-
-#[cfg(target_arch = "aarch64")]
-fn optimized_aarch64_function() { /* ARM64 specific implementation */ }
-
-#[cfg(not(any(target_arch = "x86_64", target_arch = "aarch64")))]
-fn generic_function() { /* Generic fallback implementation */ }
-```
-
-### 2. Platform-Specific Dependencies
-
- Use feature flags for platform-specific dependencies
- Provide fallback implementations for unsupported platforms
- Test on multiple architectures in CI/CD pipeline
-
-### 3. Endianness Considerations
-
- Use explicit byte order conversion when dealing with binary data
- Prefer `to_le_bytes()`, `from_le_bytes()` for consistent little-endian format
- Use `byteorder` crate for complex binary format handling
-
-### 4. SIMD and Performance Optimizations
-
- Use portable SIMD libraries like `wide` or `packed_simd`
- Provide fallback implementations for non-SIMD architectures
- Use runtime feature detection when appropriate
-
-## Security Guidelines
-
-### 1. Memory Safety
-
- Disable `unsafe` code (workspace.lints.rust.unsafe_code = "deny")
- Use `rustls` instead of `openssl`
-
-### 2. Authentication and Authorization
-
-```rust
-// Use IAM system for permission checks
-let identity = iam.authenticate(&access_key, &secret_key).await?;
-iam.authorize(&identity, &action, &resource).await?;
-```
-
-## Configuration Management Guidelines
-
-### 1. Environment Variables
-
- Use `RUSTFS_` prefix
- Support both configuration files and environment variables
- Provide reasonable default values
-
-### 2. Configuration Structure
-
-```rust
-#[derive(Debug, Deserialize, Clone)]
-pub struct Config {
-    pub address: String,
-    pub volumes: String,
-    #[serde(default)]
-    pub console_enable: bool,
-}
-```
-
-## Dependency Management Guidelines
-
-### 1. Workspace Dependencies
-
- Manage versions uniformly at workspace level
- Use `workspace = true` to inherit configuration
-
-### 2. Feature Flags
-
-```rust
-[features]
-default = ["file"]
-gpu = ["dep:nvml-wrapper"]
-kafka = ["dep:rdkafka"]
-```
-
-## Deployment and Operations Guidelines
-
-### 1. Containerization
-
- Provide Dockerfile and docker-compose configuration
- Support multi-stage builds to optimize image size
-
-### 2. Observability
-
- Integrate OpenTelemetry for distributed tracing
- Support Prometheus metrics collection
- Provide Grafana dashboards
-
-### 3. Health Checks
-
-```rust
-// Implement health check endpoint
-async fn health_check() -> Result<HealthStatus> {
-    // Check component status
-}
-```
-
-## Code Review Checklist
-
-### 1. **Code Formatting and Quality (MANDATORY)**
-
- [ ] **Code is properly formatted** (`cargo fmt --all --check` passes)
- [ ] **All clippy warnings are resolved** (`cargo clippy --all-targets --all-features -- -D warnings` passes)
- [ ] **Code compiles successfully** (`cargo check --all-targets` passes)
- [ ] **Pre-commit hooks are working** and all checks pass
- [ ] **No formatting-related changes** mixed with functional changes (separate commits)
-
-### 2. Functionality
-
- [ ] Are all error cases properly handled?
- [ ] Is there appropriate logging?
- [ ] Is there necessary test coverage?
-
-### 3. Performance
-
- [ ] Are unnecessary memory allocations avoided?
- [ ] Are async operations used correctly?
- [ ] Are there potential deadlock risks?
-
-### 4. Security
-
- [ ] Are input parameters properly validated?
- [ ] Are there appropriate permission checks?
- [ ] Is information leakage avoided?
-
-### 5. Cross-Platform Compatibility
-
- [ ] Does the code work on different CPU architectures (x86_64, aarch64)?
- [ ] Are platform-specific features properly gated with conditional compilation?
- [ ] Is byte order handling correct for binary data?
- [ ] Are there appropriate fallback implementations for unsupported platforms?
-
-### 6. Code Commits and Documentation
-
- [ ] Does it comply with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/)?
- [ ] Are commit messages concise and under 72 characters for the title line?
- [ ] Commit titles should be concise and in English, avoid Chinese
- [ ] Is PR description provided in copyable markdown format for easy copying?
-
-## Common Patterns and Best Practices
-
-### 1. Resource Management
-
-```rust
-// Use RAII pattern for resource management
-pub struct ResourceGuard {
-    resource: Resource,
-}
-
-impl Drop for ResourceGuard {
-    fn drop(&mut self) {
-        // Clean up resources
-    }
-}
-```
-
-### 2. Dependency Injection
-
-```rust
-// Use dependency injection pattern
-pub struct Service {
-    config: Arc<Config>,
-    storage: Arc<dyn StorageAPI>,
-}
-```
-
-### 3. Graceful Shutdown
-
-```rust
-// Implement graceful shutdown
-async fn shutdown_gracefully(shutdown_rx: &mut Receiver<()>) {
-    tokio::select! {
-        _ = shutdown_rx.recv() => {
-            info!("Received shutdown signal");
-            // Perform cleanup operations
-        }
-        _ = tokio::time::sleep(SHUTDOWN_TIMEOUT) => {
-            warn!("Shutdown timeout reached");
-        }
-    }
-}
-```
-
-## Domain-Specific Guidelines
-
-### 1. Storage Operations
-
- All storage operations must support erasure coding
- Implement read/write quorum mechanisms
- Support data integrity verification
-
-### 2. Network Communication
-
- Use gRPC for internal service communication
- HTTP/HTTPS support for S3-compatible API
- Implement connection pooling and retry mechanisms
-
-### 3. Metadata Management
-
- Use FlatBuffers for serialization
- Support version control and migration
- Implement metadata caching
-
-## Branch Management and Development Workflow
-
-### Branch Management
-
- **🚨 CRITICAL: NEVER modify code directly on main or master branch - THIS IS ABSOLUTELY FORBIDDEN 🚨**
- **⚠️ ANY DIRECT COMMITS TO MASTER/MAIN WILL BE REJECTED AND MUST BE REVERTED IMMEDIATELY ⚠️**
- **🔒 ALL CHANGES MUST GO THROUGH PULL REQUESTS - NO DIRECT COMMITS TO MAIN UNDER ANY CIRCUMSTANCES 🔒**
- **Always work on feature branches - NO EXCEPTIONS**
- Always check the .rules.md file before starting to ensure you understand the project guidelines
- **MANDATORY workflow for ALL changes:**
-   1. `git checkout main` (switch to main branch)
-   2. `git pull` (get latest changes)
-   3. `git checkout -b feat/your-feature-name` (create and switch to feature branch)
-   4. Make your changes ONLY on the feature branch
-   5. Test thoroughly before committing
-   6. Commit and push to the feature branch
-   7. **Create a pull request for code review - THIS IS THE ONLY WAY TO MERGE TO MAIN**
-   8. **Wait for PR approval before merging - NEVER merge your own PRs without review**
- Use descriptive branch names following the pattern: `feat/feature-name`, `fix/issue-name`, `refactor/component-name`, etc.
- **Double-check current branch before ANY commit: `git branch` to ensure you're NOT on main/master**
- **Pull Request Requirements:**
-  - All changes must be submitted via PR regardless of size or urgency
-  - PRs must include comprehensive description and testing information
-  - PRs must pass all CI/CD checks before merging
-  - PRs require at least one approval from code reviewers
-  - Even hotfixes and emergency changes must go through PR process
- **Enforcement:**
-  - Main branch should be protected with branch protection rules
-  - Direct pushes to main should be blocked by repository settings
-  - Any accidental direct commits to main must be immediately reverted via PR
-
-### Development Workflow
-
-## 🎯 **Core Development Principles**
-
- **🔴 Every change must be precise - don't modify unless you're confident**
-  - Carefully analyze code logic and ensure complete understanding before making changes
-  - When uncertain, prefer asking users or consulting documentation over blind modifications
-  - Use small iterative steps, modify only necessary parts at a time
-  - Evaluate impact scope before changes to ensure no new issues are introduced
-
- **🚀 GitHub PR creation prioritizes gh command usage**
-  - Prefer using `gh pr create` command to create Pull Requests
-  - Avoid having users manually create PRs through web interface
-  - Provide clear and professional PR titles and descriptions
-  - Using `gh` commands ensures better integration and automation
-
-## 📝 **Code Quality Requirements**
-
- Use English for all code comments, documentation, and variable names
- Write meaningful and descriptive names for variables, functions, and methods
- Avoid meaningless test content like "debug 111" or placeholder values
- Before each change, carefully read the existing code to ensure you understand the code structure and implementation, do not break existing logic implementation, do not introduce new issues
- Ensure each change provides sufficient test cases to guarantee code correctness
- Do not arbitrarily modify numbers and constants in test cases, carefully analyze their meaning to ensure test case correctness
- When writing or modifying tests, check existing test cases to ensure they have scientific naming and rigorous logic testing, if not compliant, modify test cases to ensure scientific and rigorous testing
- **Before committing any changes, run `cargo clippy --all-targets --all-features -- -D warnings` to ensure all code passes Clippy checks**
- After each development completion, first git add . then git commit -m "feat: feature description" or "fix: issue description", ensure compliance with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/)
- **Keep commit messages concise and under 72 characters** for the title line, use body for detailed explanations if needed
- After each development completion, first git push to remote repository
- After each change completion, summarize the changes, do not create summary files, provide a brief change description, ensure compliance with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/)
- Provide change descriptions needed for PR in the conversation, ensure compliance with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/)
- **Always provide PR descriptions in English** after completing any changes, including:
-  - Clear and concise title following Conventional Commits format
-  - Detailed description of what was changed and why
-  - List of key changes and improvements
-  - Any breaking changes or migration notes if applicable
-  - Testing information and verification steps
- **Provide PR descriptions in copyable markdown format** enclosed in code blocks for easy one-click copying
-
-## 🚫 AI Documentation Generation Restrictions
-
-### Forbidden Summary Documents
-
- **Strictly forbidden to create any form of AI-generated summary documents**
- **Do not create documents containing large amounts of emoji, detailed formatting tables and typical AI style**
- **Do not generate the following types of documents in the project:**
-  - Benchmark summary documents (BENCHMARK*.md)
-  - Implementation comparison analysis documents (IMPLEMENTATION_COMPARISON*.md)
-  - Performance analysis report documents
-  - Architecture summary documents
-  - Feature comparison documents
-  - Any documents with large amounts of emoji and formatted content
- **If documentation is needed, only create when explicitly requested by the user, and maintain a concise and practical style**
- **Documentation should focus on actually needed information, avoiding excessive formatting and decorative content**
- **Any discovered AI-generated summary documents should be immediately deleted**
-
-### Allowed Documentation Types
-
- README.md (project introduction, keep concise)
- Technical documentation (only create when explicitly needed)
- User manual (only create when explicitly needed)
- API documentation (generated from code)
- Changelog (CHANGELOG.md)
-
-These rules should serve as guiding principles when developing the RustFS project, ensuring code quality, performance, and maintainability.
@@ -1,250 +0,0 @@
-{
-    "version": "0.2.0",
-    "configurations": [
-          {
-            "type": "lldb",
-            "request": "launch",
-            "name": "Debug(only) executable 'rustfs'",
-            "env": {
-              "RUST_LOG": "rustfs=info,ecstore=info,s3s=info,iam=info",
-              "RUSTFS_SKIP_BACKGROUND_TASK": "on"
-              //"RUSTFS_OBS_LOG_DIRECTORY": "./deploy/logs",
-              // "RUSTFS_POLICY_PLUGIN_URL":"http://localhost:8181/v1/data/rustfs/authz/allow",
-              // "RUSTFS_POLICY_PLUGIN_AUTH_TOKEN":"your-opa-token"
-            },
-            "program": "${workspaceFolder}/target/debug/rustfs",
-            "args": [
-              "--access-key",
-              "rustfsadmin",
-              "--secret-key",
-              "rustfsadmin",
-              "--address",
-              "0.0.0.0:9010",
-              "--server-domains",
-              "127.0.0.1:9010",
-              "./target/volume/test{1...4}"
-            ],
-            "cwd": "${workspaceFolder}"
-        },
-        {
-            "type": "lldb",
-            "request": "launch",
-            "name": "Debug executable 'rustfs'",
-            "cargo": {
-                "args": [
-                    "build",
-                    "--bin=rustfs",
-                    "--package=rustfs"
-                ],
-                "filter": {
-                    "name": "rustfs",
-                    "kind": "bin"
-                }
-            },
-            "env": {
-                "RUST_LOG": "rustfs=debug,ecstore=info,s3s=debug,iam=debug",
-                "RUSTFS_SKIP_BACKGROUND_TASK": "on",
-                //"RUSTFS_OBS_LOG_DIRECTORY": "./deploy/logs",
-                // "RUSTFS_POLICY_PLUGIN_URL":"http://localhost:8181/v1/data/rustfs/authz/allow",
-                // "RUSTFS_POLICY_PLUGIN_AUTH_TOKEN":"your-opa-token" 
-            },
-            "args": [
-                "--access-key",
-                "rustfsadmin",
-                "--secret-key",
-                "rustfsadmin",
-                "--address",
-                "0.0.0.0:9010",
-                "--server-domains",
-                "127.0.0.1:9010",
-                "./target/volume/test{1...4}"
-            ],
-            "cwd": "${workspaceFolder}"
-        },
-        {
-            "type": "lldb",
-            "request": "launch",
-            "name": "Debug unit tests in executable 'rustfs'",
-            "cargo": {
-                "args": [
-                    "test",
-                    "--no-run",
-                    "--bin=rustfs",
-                    "--package=rustfs"
-                ],
-                "filter": {
-                    "name": "rustfs",
-                    "kind": "bin"
-                }
-            },
-            "args": [],
-            "cwd": "${workspaceFolder}"
-        },
-        {
-            "type": "lldb",
-            "request": "launch",
-            "name": "Debug unit tests in library 'ecstore'",
-            "cargo": {
-                "args": [
-                    "test",
-                    "--no-run",
-                    "--lib",
-                    "--package=rustfs-ecstore"
-                ]
-            },
-            "args": [],
-            "cwd": "${workspaceFolder}"
-        },
-        {
-            "name": "Debug executable target/debug/rustfs",
-            "type":  "lldb",
-            "request": "launch",
-            "cargo": {
-                "args": [
-                    "run",
-                    "--bin",
-                    "rustfs",
-                    "-j",
-                    "1",
-                    "--profile",
-                    "dev"
-                ]
-            },
-            "args": [],
-            "cwd": "${workspaceFolder}",
-            //"stopAtEntry": false,
-            //"preLaunchTask": "cargo build",
-            "env": {
-                "RUSTFS_ACCESS_KEY": "rustfsadmin",
-                "RUSTFS_SECRET_KEY": "rustfsadmin",
-                //"RUSTFS_VOLUMES": "./target/volume/test{1...4}",
-                "RUSTFS_ADDRESS": ":9000",
-                "RUSTFS_CONSOLE_ENABLE": "true",
-                // "RUSTFS_OBS_TRACE_ENDPOINT": "http://127.0.0.1:4318/v1/traces", // jeager otlp http endpoint
-                // "RUSTFS_OBS_METRIC_ENDPOINT": "http://127.0.0.1:4318/v1/metrics", // default otlp http endpoint
-                // "RUSTFS_OBS_LOG_ENDPOINT": "http://127.0.0.1:4318/v1/logs", // default otlp http endpoint
-                // "RUSTFS_COMPRESS_ENABLE": "true",
-                "RUSTFS_CONSOLE_ADDRESS": "127.0.0.1:9001",
-                "RUSTFS_OBS_LOG_DIRECTORY": "./target/logs",
-                "RUST_LOG":"rustfs=debug,ecstore=debug,s3s=debug,iam=debug",
-            },
-            "sourceLanguages": [
-                "rust"
-            ],
-        },
-        {
-            "type": "lldb",
-            "request": "launch",
-            "name": "Debug test_lifecycle_transition_basic",
-            "cargo": {
-                "args": [
-                    "test",
-                    "-p",
-                    "rustfs-scanner",
-                    "--test",
-                    "lifecycle_integration_test",
-                    "serial_tests::test_lifecycle_transition_basic",
-                    "-j",
-                    "1"
-                ]
-            },
-            "args": [],
-            "cwd": "${workspaceFolder}"
-        },
-        {
-            "name": "Debug executable target/debug/test",
-            "type":  "lldb",
-            "request": "launch",
-            "program": "${workspaceFolder}/target/debug/deps/lifecycle_integration_test-5915cbfcab491b3b",
-            "args": [
-              "--skip",
-              "test_lifecycle_expiry_basic",
-              "--skip",
-              "test_lifecycle_expiry_deletemarker",
-              //"--skip",
-              //"test_lifecycle_transition_basic",
-            ],
-            "cwd": "${workspaceFolder}",
-            //"stopAtEntry": false,
-            //"preLaunchTask": "cargo build",
-            "sourceLanguages": [
-                "rust"
-            ],
-        },
-        {
-            "name": "Debug executable target/debug/rustfs with sse",
-            "type":  "lldb",
-            "request": "launch",
-            "program": "${workspaceFolder}/target/debug/rustfs",
-            "args": [],
-            "cwd": "${workspaceFolder}",
-            //"stopAtEntry": false,
-            //"preLaunchTask": "cargo build",
-            "env": {
-                "RUSTFS_ACCESS_KEY": "rustfsadmin",
-                "RUSTFS_SECRET_KEY": "rustfsadmin",
-                "RUSTFS_VOLUMES": "./target/volumes/test{1...4}",
-                "RUSTFS_ADDRESS": ":9000",
-                "RUSTFS_CONSOLE_ENABLE": "true",
-                "RUSTFS_CONSOLE_ADDRESS": "127.0.0.1:9001",
-                "RUSTFS_OBS_LOG_DIRECTORY": "./target/logs",
-                // "RUSTFS_OBS_TRACE_ENDPOINT": "http://127.0.0.1:4318/v1/traces", // jeager otlp http endpoint
-                // "RUSTFS_OBS_METRIC_ENDPOINT": "http://127.0.0.1:4318/v1/metrics", // default otlp http endpoint
-                // "RUSTFS_OBS_LOG_ENDPOINT": "http://127.0.0.1:4318/v1/logs", // default otlp http endpoint
-                // "RUSTFS_COMPRESS_ENABLE": "true",
-
-                // 1. simple sse test key (no kms system)
-                // "__RUSTFS_SSE_SIMPLE_CMK": "2dfNXGHlsEflGVCxb+5DIdGEl1sIvtwX+QfmYasi5QM=",
-
-                // 2. kms local backend test key
-                "RUSTFS_KMS_ENABLE": "true",
-                "RUSTFS_KMS_BACKEND": "local",
-                "RUSTFS_KMS_KEY_DIR": "./target/kms-key-dir",
-                "RUSTFS_KMS_LOCAL_MASTER_KEY": "my-secret-key", // Some Password
-                "RUSTFS_KMS_DEFAULT_KEY_ID": "rustfs-master-key",
-
-                // 3. kms vault backend test key
-                // "RUSTFS_KMS_ENABLE": "true",
-                // "RUSTFS_KMS_BACKEND": "vault",
-                // "RUSTFS_KMS_VAULT_ADDRESS": "http://127.0.0.1:8200",
-                // "RUSTFS_KMS_VAULT_TOKEN": "Dev Token",
-                // "RUSTFS_KMS_DEFAULT_KEY_ID": "rustfs-master-key",
-
-            },
-            "sourceLanguages": [
-                "rust"
-            ],
-        },
-        {
-            "name": "E2E test executable target/debug/rustfs",
-            "type":  "lldb",
-            "request": "launch",
-            "program": "${workspaceFolder}/target/debug/rustfs",
-            "args": [],
-            "cwd": "${workspaceFolder}",
-            //"stopAtEntry": false,
-            //"preLaunchTask": "cargo build",
-            "env": {
-                "RUST_LOG": "rustfs=debug,ecstore=info,s3s=debug,iam=debug",
-                "RUST_BACKTRACE": "full",
-                "RUSTFS_ACCESS_KEY": "rustfsadmin",
-                "RUSTFS_SECRET_KEY": "rustfsadmin",
-                "RUSTFS_VOLUMES": "./target/e2e-test/test{1...4}",
-                "RUSTFS_REGION": "us-east-1",
-                "RUSTFS_ADDRESS": ":9000",
-                "RUSTFS_CONSOLE_ENABLE": "true",
-                "RUSTFS_CONSOLE_ADDRESS": "127.0.0.1:9001",
-                "RUSTFS_OBS_LOG_DIRECTORY": "./target/logs",
-
-                "RUSTFS_KMS_ENABLE": "true",
-                "RUSTFS_KMS_BACKEND": "local",
-                "RUSTFS_KMS_KEY_DIR": "./target/e2e-key-dir",
-                "RUSTFS_KMS_LOCAL_MASTER_KEY": "my-secret-key", // Some Password
-                "RUSTFS_KMS_DEFAULT_KEY_ID": "rustfs-master-key",
-            },
-            "sourceLanguages": [
-                "rust"
-            ],
-        },
-    ]
-}
@@ -1,101 +0,0 @@
-# Repository Guidelines
-
-This file provides guidance for AI agents and developers working with code in this repository.
-
-## Project Overview
-
-RustFS is a high-performance distributed object storage software built with Rust, providing S3-compatible APIs and advanced features like data lakes, AI, and big data support. It's designed as an alternative to MinIO with better performance and a more business-friendly Apache 2.0 license.
-
-## ⚠️ Pre-Commit Checklist (MANDATORY)
-
-**Before EVERY commit, you MUST run and pass ALL of the following:**
-```bash
-cargo fmt --all --check    # Code formatting
-cargo clippy --all-targets --all-features -- -D warnings  # Lints
-cargo test --workspace --exclude e2e_test  # Unit tests
-```
-Or simply run `make pre-commit` which covers all checks. **DO NOT commit if any check fails.**
-
-## Communication Rules
-
- Respond to the user in Chinese; use English in all other contexts.
- Code and documentation must be written in English only. Chinese text is allowed solely as test data/fixtures when a case explicitly requires Chinese-language content for validation.
- **Pull Request titles and descriptions must be written in English** to ensure consistency and accessibility for all contributors.
-
-## Project Structure
-
-The workspace root hosts shared dependencies in `Cargo.toml`. The service binary lives under `rustfs/src/main.rs`, while reusable crates sit in `crates/` (including `ecstore`, `iam`, `kms`, `madmin`, `s3select-api`, `s3select-query`, `config`, `crypto`, `lock`, `filemeta`, `rio`, `common`, `protos`, `audit-logger`, `notify`, `obs`, `workers`, `appauth`, `ahm`, `mcp`, `signer`, `checksums`, `utils`, `zip`, `targets`, and `e2e_test`). Deployment manifests are under `deploy/`, Docker assets sit at the root, and automation lives in `scripts/`.
-
-### Core Architecture
-
- **Main Binary (`rustfs/`):** Entry point at `rustfs/src/main.rs`, includes admin, auth, config, server, storage, license management, and profiling modules.
- **Key Crates:** Cargo workspace with 25+ crates supporting S3-compatible APIs, erasure coding storage, IAM, KMS, S3 Select, and observability.
- **Build System:** Custom `build-rustfs.sh` script, multi-architecture Docker builds, Make/Just task runners, cross-compilation support.
-
-## Build, Test, and Development Commands
-
-### Quick Commands
- `cargo check --all-targets` - Fast validation
- `cargo build --release` or `make build` - Release build
- `./build-rustfs.sh --dev` - Development build with debug symbols
- `make pre-commit` - Run all quality checks (fmt, clippy, check, test)
-
-### Testing
- `cargo test --workspace --exclude e2e_test` - Unit tests
- `cargo test --package e2e_test` - E2E tests
- For KMS tests: `NO_PROXY=127.0.0.1,localhost HTTP_PROXY= HTTPS_PROXY= http_proxy= https_proxy= cargo test --package e2e_test test_local_kms_end_to_end -- --nocapture --test-threads=1`
-
-### Cross-Platform Builds
- `./build-rustfs.sh --platform x86_64-unknown-linux-musl` - Build for musl
- `./build-rustfs.sh --platform aarch64-unknown-linux-gnu` - Build for ARM64
- `make build-cross-all` - Build all supported architectures
-
-## Coding Style & Safety Requirements
-
- **Formatting:** Follow `rustfmt.toml` (130-column width). Use `snake_case` for items, `PascalCase` for types, `SCREAMING_SNAKE_CASE` for constants.
- **Safety:** `unsafe_code = "deny"` enforced at workspace level. Never use `unwrap()`, `expect()`, or panic-inducing code except in tests.
- **Error Handling:** Prefer `anyhow` for applications, `thiserror` for libraries. Use proper error handling with `Result<T, E>` and `Option<T>`.
- **Async:** Keep async code non-blocking. Offload CPU-heavy work with `tokio::task::spawn_blocking` when necessary.
- **Language:** Code comments, function names, variable names, and all text in source files must be in English only.
-
-## Testing Guidelines
-
-Co-locate unit tests with their modules and give behavior-led names. Integration suites belong in each crate's `tests/` directory, while exhaustive end-to-end scenarios live in `crates/e2e_test/`. When fixing bugs or adding features, include regression tests that capture the new behavior.
-
-## KMS (Key Management Service)
-
- **Implementation:** Complete with Local and Vault backends, auto-configures on startup with `--kms-enable` flag.
- **Encryption:** Full S3-compatible server-side encryption (SSE-S3, SSE-KMS, SSE-C).
- **Testing:** Comprehensive E2E tests in `crates/e2e_test/src/kms/`. Requires proxy bypass for local testing.
- **Key Files:** `crates/kms/`, `rustfs/src/storage/ecfs.rs`, `rustfs/src/admin/handlers/kms*.rs`
-
-## Environment Variables
-
- `RUSTFS_ENABLE_SCANNER` - Enable/disable background data scanner (default: true)
- `RUSTFS_ENABLE_HEAL` - Enable/disable auto-heal functionality (default: true)
- For KMS tests: `NO_PROXY=127.0.0.1,localhost` and clear proxy environment variables
-
-## Commit & Pull Request Guidelines
-
-Work on feature branches (e.g., `feat/...`) after syncing `main`. Follow Conventional Commits under 72 characters. Each commit must compile, format cleanly, and pass `make pre-commit`.
-
-**Pull Request Requirements:**
- PR titles and descriptions **MUST be written in English**
- Open PRs with a concise summary, note verification commands, link relevant issues
- Follow the PR template format and fill in all required sections
- Wait for reviewer approval before merging
-
-## Security & Configuration Tips
-
-Do not commit secrets or cloud credentials; prefer environment variables or vault tooling. Review IAM- and KMS-related changes with a second maintainer. Confirm proxy settings before running sensitive tests to avoid leaking traffic outside localhost.
-
-## Important Reminders
-
- Always compile after code changes: Use `cargo build` to catch errors early
- Don't bypass tests: All functionality must be properly tested, not worked around
- Use proper error handling: Never use `unwrap()` or `expect()` in production code (except tests)
- Do what has been asked; nothing more, nothing less
- NEVER create files unless they're absolutely necessary for achieving your goal
- ALWAYS prefer editing an existing file to creating a new one
- NEVER proactively create documentation files (*.md) or README files unless explicitly requested
- NEVER commit PR description files (e.g., PR_DESCRIPTION.md): These are temporary reference files for creating pull requests and should remain local only
@@ -1,85 +0,0 @@
-RustFS Individual Contributor License Agreement
-
-Thank you for your interest in contributing documentation and related software code to a project hosted or managed by
-RustFS. In order to clarify the intellectual property license granted with Contributions from any person or entity,
-RustFS must have a Contributor License Agreement ("CLA") on file that has been signed by each Contributor, indicating
-agreement to the license terms below. This version of the Contributor License Agreement allows an individual to submit
-Contributions to the applicable project. If you are making a submission on behalf of a legal entity, then you should
-sign the separate Corporate Contributor License Agreement.
-
-You accept and agree to the following terms and conditions for Your present and future Contributions submitted to
-RustFS. You hereby irrevocably assign and transfer to RustFS all right, title, and interest in and to Your
-Contributions, including all copyrights and other intellectual property rights therein.
-
-Definitions
-
-“You” (or “Your”) shall mean the copyright owner or legal entity authorized by the copyright owner that is making this
-Agreement with RustFS. For legal entities, the entity making a Contribution and all other entities that control, are
-controlled by, or are under common control with that entity are considered to be a single Contributor. For the purposes
-of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such
-entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares,
-or (iii) beneficial ownership of such entity.
-
-“Contribution” shall mean any original work of authorship, including any modifications or additions to an existing work,
-that is intentionally submitted by You to RustFS for inclusion in, or documentation of, any of the products or projects
-owned or managed by RustFS (the "Work"), including without limitation any Work described in Schedule A. For the purposes
-of this definition, "submitted" means any form of electronic or written communication sent to RustFS or its
-representatives, including but not limited to communication on electronic mailing lists, source code control systems,
-and issue tracking systems that are managed by, or on behalf of, RustFS for the purpose of discussing and improving the
-Work.
-
-Assignment of Copyright
-
-Subject to the terms and conditions of this Agreement, You hereby irrevocably assign and transfer to RustFS all right,
-title, and interest in and to Your Contributions, including all copyrights and other intellectual property rights
-therein, for the entire term of such rights, including all renewals and extensions. You agree to execute all documents
-and take all actions as may be reasonably necessary to vest in RustFS the ownership of Your Contributions and to assist
-RustFS in perfecting, maintaining, and enforcing its rights in Your Contributions.
-
-Grant of Patent License
-
-Subject to the terms and conditions of this Agreement, You hereby grant to RustFS and to recipients of documentation and
-software distributed by RustFS a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as
-stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the
-Work, where such license applies only to those patent claims licensable by You that are necessarily infringed by Your
-Contribution(s) alone or by combination of Your Contribution(s) with the Work to which such Contribution(s) was
-submitted. If any entity institutes patent litigation against You or any other entity (including a cross-claim or
-counterclaim in a lawsuit) alleging that your Contribution, or the Work to which you have contributed, constitutes
-direct or contributory patent infringement, then any patent licenses granted to that entity under this Agreement for
-that Contribution or Work shall terminate as of the date such litigation is filed.
-
-You represent that you are legally entitled to grant the above assignment and license.
-
-You represent that each of Your Contributions is Your original creation (see section 7 for submissions on behalf of
-others). You represent that Your Contribution submissions include complete details of any third-party license or other
-restriction (including, but not limited to, related patents and trademarks) of which you are personally aware and which
-are associated with any part of Your Contributions.
-
-You are not expected to provide support for Your Contributions, except to the extent You desire to provide support. You
-may provide support for free, for a fee, or not at all. Unless required by applicable law or agreed to in writing, You
-provide Your Contributions on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied,
-including, without limitation, any warranties or conditions of TITLE, NON- INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR
-A PARTICULAR PURPOSE.
-
-Should You wish to submit work that is not Your original creation, You may submit it to RustFS separately from any
-Contribution, identifying the complete details of its source and of any license or other restriction (including, but not
-limited to, related patents, trademarks, and license agreements) of which you are personally aware, and conspicuously
-marking the work as "Submitted on behalf of a third-party: [named here]”.
-
-You agree to notify RustFS of any facts or circumstances of which you become aware that would make these representations
-inaccurate in any respect.
-
-Modification of CLA
-
-RustFS reserves the right to update or modify this CLA in the future. Any updates or modifications to this CLA shall
-apply only to Contributions made after the effective date of the revised CLA. Contributions made prior to the update
-shall remain governed by the version of the CLA that was in effect at the time of submission. It is not necessary for
-all Contributors to re-sign the CLA when the CLA is updated or modified.
-
-Governing Law and Dispute Resolution
-
-This Agreement will be governed by and construed in accordance with the laws of the People's Republic of China excluding
-that body of laws known as conflict of laws. The parties expressly agree that the United Nations Convention on Contracts
-for the International Sale of Goods will not apply. Any legal action or proceeding arising under this Agreement will be
-brought exclusively in the courts located in Beijing, China, and the parties hereby irrevocably consent to the personal
-jurisdiction and venue therein.
@@ -1,128 +0,0 @@
-# Contributor Covenant Code of Conduct
-
-## Our Pledge
-
-We as members, contributors, and leaders pledge to make participation in our
-community a harassment-free experience for everyone, regardless of age, body
-size, visible or invisible disability, ethnicity, sex characteristics, gender
-identity and expression, level of experience, education, socio-economic status,
-nationality, personal appearance, race, religion, or sexual identity
-and orientation.
-
-We pledge to act and interact in ways that contribute to an open, welcoming,
-diverse, inclusive, and healthy community.
-
-## Our Standards
-
-Examples of behavior that contributes to a positive environment for our
-community include:
-
-* Demonstrating empathy and kindness toward other people
-* Being respectful of differing opinions, viewpoints, and experiences
-* Giving and gracefully accepting constructive feedback
-* Accepting responsibility and apologizing to those affected by our mistakes,
-  and learning from the experience
-* Focusing on what is best not just for us as individuals, but for the
-  overall community
-
-Examples of unacceptable behavior include:
-
-* The use of sexualized language or imagery, and sexual attention or
-  advances of any kind
-* Trolling, insulting or derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or email
-  address, without their explicit permission
-* Other conduct which could reasonably be considered inappropriate in a
-  professional setting
-
-## Enforcement Responsibilities
-
-Community leaders are responsible for clarifying and enforcing our standards of
-acceptable behavior and will take appropriate and fair corrective action in
-response to any behavior that they deem inappropriate, threatening, offensive,
-or harmful.
-
-Community leaders have the right and responsibility to remove, edit, or reject
-comments, commits, code, wiki edits, issues, and other contributions that are
-not aligned to this Code of Conduct, and will communicate reasons for moderation
-decisions when appropriate.
-
-## Scope
-
-This Code of Conduct applies within all community spaces, and also applies when
-an individual is officially representing the community in public spaces.
-Examples of representing our community include using an official e-mail address,
-posting via an official social media account, or acting as an appointed
-representative at an online or offline event.
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be
-reported to the community leaders responsible for enforcement at
-hello@rustfs.com.
-All complaints will be reviewed and investigated promptly and fairly.
-
-All community leaders are obligated to respect the privacy and security of the
-reporter of any incident.
-
-## Enforcement Guidelines
-
-Community leaders will follow these Community Impact Guidelines in determining
-the consequences for any action they deem in violation of this Code of Conduct:
-
-### 1. Correction
-
-**Community Impact**: Use of inappropriate language or other behavior deemed
-unprofessional or unwelcome in the community.
-
-**Consequence**: A private, written warning from community leaders, providing
-clarity around the nature of the violation and an explanation of why the
-behavior was inappropriate. A public apology may be requested.
-
-### 2. Warning
-
-**Community Impact**: A violation through a single incident or series
-of actions.
-
-**Consequence**: A warning with consequences for continued behavior. No
-interaction with the people involved, including unsolicited interaction with
-those enforcing the Code of Conduct, for a specified period of time. This
-includes avoiding interactions in community spaces as well as external channels
-like social media. Violating these terms may lead to a temporary or
-permanent ban.
-
-### 3. Temporary Ban
-
-**Community Impact**: A serious violation of community standards, including
-sustained inappropriate behavior.
-
-**Consequence**: A temporary ban from any sort of interaction or public
-communication with the community for a specified period of time. No public or
-private interaction with the people involved, including unsolicited interaction
-with those enforcing the Code of Conduct, is allowed during this period.
-Violating these terms may lead to a permanent ban.
-
-### 4. Permanent Ban
-
-**Community Impact**: Demonstrating a pattern of violation of community
-standards, including sustained inappropriate behavior,  harassment of an
-individual, or aggression toward or disparagement of classes of individuals.
-
-**Consequence**: A permanent ban from any sort of public interaction within
-the community.
-
-## Attribution
-
-This Code of Conduct is adapted from the [Contributor Covenant][homepage],
-version 2.0, available at
-https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
-
-Community Impact Guidelines were inspired by [Mozilla's code of conduct
-enforcement ladder](https://github.com/mozilla/diversity).
-
-[homepage]: https://www.contributor-covenant.org
-
-For answers to common questions about this code of conduct, see the FAQ at
-https://www.contributor-covenant.org/faq. Translations are available at
-https://www.contributor-covenant.org/translations.
@@ -1,224 +0,0 @@
-# RustFS Development Guide
-
-## 📋 Code Quality Requirements
-
-For instructions on setting up and running the local development environment, please see [Development Guide](docs/DEVELOPMENT.md).
-
-### 🔧 Code Formatting Rules
-
-**MANDATORY**: All code must be properly formatted before committing. This project enforces strict formatting standards to maintain code consistency and readability.
-
-#### Pre-commit Requirements
-
-Before every commit, you **MUST**:
-
-1. **Format your code**:
-
-   ```bash
-   cargo fmt --all
-   ```
-
-2. **Verify formatting**:
-
-   ```bash
-   cargo fmt --all --check
-   ```
-
-3. **Pass clippy checks**:
-
-   ```bash
-   cargo clippy --all-targets --all-features -- -D warnings
-   ```
-
-4. **Ensure compilation**:
-
-   ```bash
-   cargo check --all-targets
-   ```
-
-#### Quick Commands
-
-We provide convenient Makefile targets for common tasks:
-
-```bash
-# Format all code
-make fmt
-
-# Check if code is properly formatted
-make fmt-check
-
-# Run clippy checks
-make clippy
-
-# Run compilation check
-make check
-
-# Run tests
-make test
-
-# Run all pre-commit checks (format + clippy + check + test)
-make pre-commit
-
-# Setup git hooks (one-time setup)
-make setup-hooks
-```
-
-### 🔒 Automated Pre-commit Hooks
-
-This project includes a pre-commit hook that automatically runs before each commit to ensure:
-
- ✅ Code is properly formatted (`cargo fmt --all --check`)
- ✅ No clippy warnings (`cargo clippy --all-targets --all-features -- -D warnings`)
- ✅ Code compiles successfully (`cargo check --all-targets`)
-
-#### Setting Up Pre-commit Hooks
-
-Run this command once after cloning the repository:
-
-```bash
-make setup-hooks
-```
-
-Or manually:
-
-```bash
-chmod +x .git/hooks/pre-commit
-```
-
-### 📝 Formatting Configuration
-
-The project uses the following rustfmt configuration (defined in `rustfmt.toml`):
-
-```toml
-max_width = 130
-fn_call_width = 90
-single_line_let_else_max_width = 100
-```
-
-### 🚫 Commit Prevention
-
-If your code doesn't meet the formatting requirements, the pre-commit hook will:
-
-1. **Block the commit** and show clear error messages
-2. **Provide exact commands** to fix the issues
-3. **Guide you through** the resolution process
-
-Example output when formatting fails:
-
-```
-❌ Code formatting check failed!
-💡 Please run 'cargo fmt --all' to format your code before committing.
-
-🔧 Quick fix:
-   cargo fmt --all
-   git add .
-   git commit
-```
-
-### 🔄 Development Workflow
-
-1. **Make your changes**
-2. **Format your code**: `make fmt` or `cargo fmt --all`
-3. **Run pre-commit checks**: `make pre-commit`
-4. **Commit your changes**: `git commit -m "your message"`
-5. **Push to your branch**: `git push`
-
-### 🛠️ IDE Integration
-
-#### VS Code
-
-Install the `rust-analyzer` extension and add to your `settings.json`:
-
-```json
-{
-    "rust-analyzer.rustfmt.extraArgs": ["--config-path", "./rustfmt.toml"],
-    "editor.formatOnSave": true,
-    "[rust]": {
-        "editor.defaultFormatter": "rust-lang.rust-analyzer"
-    }
-}
-```
-
-#### Other IDEs
-
-Configure your IDE to:
-
- Use the project's `rustfmt.toml` configuration
- Format on save
- Run clippy checks
-
-### ❗ Important Notes
-
- **Never bypass formatting checks** - they are there for a reason
- **All CI/CD pipelines** will also enforce these same checks
- **Pull requests** will be automatically rejected if formatting checks fail
- **Consistent formatting** improves code readability and reduces merge conflicts
-
-### 🆘 Troubleshooting
-
-#### Pre-commit hook not running?
-
-```bash
-# Check if hook is executable
-ls -la .git/hooks/pre-commit
-
-# Make it executable if needed
-chmod +x .git/hooks/pre-commit
-```
-
-#### Formatting issues?
-
-```bash
-# Format all code
-cargo fmt --all
-
-# Check specific issues
-cargo fmt --all --check --verbose
-```
-
-#### Clippy issues?
-
-```bash
-# See detailed clippy output
-cargo clippy --all-targets --all-features -- -D warnings
-
-# Fix automatically fixable issues
-cargo clippy --fix --all-targets --all-features
-```
-
-## 📝 Pull Request Guidelines
-
-### Language Requirements
-
-**All Pull Request titles and descriptions MUST be written in English.**
-
-This ensures:
- Consistency across all contributions
- Accessibility for international contributors
- Better integration with automated tools and CI/CD systems
- Clear communication in a globally understood language
-
-#### PR Description Requirements
-
-When creating a Pull Request, ensure:
-
-1. **Title**: Use English and follow Conventional Commits format (e.g., `fix: improve s3-tests readiness detection`)
-2. **Description**: Write in English, following the PR template format
-3. **Code Comments**: Must be in English (as per coding standards)
-4. **Commit Messages**: Must be in English (as per commit guidelines)
-
-#### PR Template
-
-Always use the PR template (`.github/pull_request_template.md`) and fill in all sections:
- Type of Change
- Related Issues
- Summary of Changes
- Checklist
- Impact
- Additional Notes
-
-**Note**: While you may communicate with reviewers in Chinese during discussions, the PR itself (title, description, and all formal documentation) must be in English.
-
---
-
-Following these guidelines ensures high code quality and smooth collaboration across the RustFS project! 🚀
@@ -1,307 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-[workspace]
-members = [
-    "rustfs", # Core file system implementation
-    "crates/appauth", # Application authentication and authorization
-    "crates/audit", # Audit target management system with multi-target fan-out
-    "crates/checksums", # client checksums
-    "crates/common", # Shared utilities and data structures
-    "crates/config", # Configuration management
-    "crates/credentials", # Credential management system
-    "crates/crypto", # Cryptography and security features
-    "crates/ecstore", # Erasure coding storage implementation
-    "crates/e2e_test", # End-to-end test suite
-    "crates/filemeta", # File metadata management
-    "crates/heal", # Erasure set and object healing
-    "crates/iam", # Identity and Access Management
-    "crates/kms", # Key Management Service
-    "crates/lock", # Distributed locking implementation
-    "crates/madmin", # Management dashboard and admin API interface
-    "crates/mcp", # MCP server for S3 operations
-    "crates/metrics", # Metrics collection and reporting
-    "crates/notify", # Notification system for events
-    "crates/obs", # Observability utilities
-    "crates/policy", # Policy management
-    "crates/protocols", # Protocol implementations (FTPS, SFTP, etc.)
-    "crates/protos", # Protocol buffer definitions
-    "crates/rio", # Rust I/O utilities and abstractions
-    "crates/s3select-api", # S3 Select API interface
-    "crates/s3select-query", # S3 Select query engine
-    "crates/scanner", # Scanner for data integrity checks and health monitoring
-    "crates/signer", # client signer
-    "crates/targets", # Target-specific configurations and utilities
-    "crates/trusted-proxies", # Trusted proxies management
-    "crates/utils", # Utility functions and helpers
-    "crates/workers", # Worker thread pools and task scheduling
-    "crates/zip", # ZIP file handling and compression
-]
-resolver = "2"
-
-[workspace.package]
-edition = "2024"
-license = "Apache-2.0"
-repository = "https://github.com/rustfs/rustfs"
-rust-version = "1.93.0"
-version = "0.0.5"
-homepage = "https://rustfs.com"
-description = "RustFS is a high-performance distributed object storage software built using Rust, one of the most popular languages worldwide. "
-keywords = ["RustFS", "Minio", "object-storage", "filesystem", "s3"]
-categories = ["web-programming", "development-tools", "filesystem", "network-programming"]
-authors = ["RustFS Team"]
-
-[workspace.lints.rust]
-unsafe_code = "deny"
-
-[workspace.lints.clippy]
-all = "warn"
-
-[workspace.dependencies]
-# RustFS Internal Crates
-rustfs = { path = "./rustfs", version = "0.0.5" }
-rustfs-heal = { path = "crates/heal", version = "0.0.5" }
-rustfs-appauth = { path = "crates/appauth", version = "0.0.5" }
-rustfs-audit = { path = "crates/audit", version = "0.0.5" }
-rustfs-checksums = { path = "crates/checksums", version = "0.0.5" }
-rustfs-common = { path = "crates/common", version = "0.0.5" }
-rustfs-config = { path = "./crates/config", version = "0.0.5" }
-rustfs-credentials = { path = "crates/credentials", version = "0.0.5" }
-rustfs-crypto = { path = "crates/crypto", version = "0.0.5" }
-rustfs-ecstore = { path = "crates/ecstore", version = "0.0.5" }
-rustfs-filemeta = { path = "crates/filemeta", version = "0.0.5" }
-rustfs-iam = { path = "crates/iam", version = "0.0.5" }
-rustfs-kms = { path = "crates/kms", version = "0.0.5" }
-rustfs-lock = { path = "crates/lock", version = "0.0.5" }
-rustfs-madmin = { path = "crates/madmin", version = "0.0.5" }
-rustfs-mcp = { path = "crates/mcp", version = "0.0.5" }
-rustfs-metrics = { path = "crates/metrics", version = "0.0.5" }
-rustfs-notify = { path = "crates/notify", version = "0.0.5" }
-rustfs-obs = { path = "crates/obs", version = "0.0.5" }
-rustfs-policy = { path = "crates/policy", version = "0.0.5" }
-rustfs-protos = { path = "crates/protos", version = "0.0.5" }
-rustfs-rio = { path = "crates/rio", version = "0.0.5" }
-rustfs-s3select-api = { path = "crates/s3select-api", version = "0.0.5" }
-rustfs-s3select-query = { path = "crates/s3select-query", version = "0.0.5" }
-rustfs-scanner = { path = "crates/scanner", version = "0.0.5" }
-rustfs-signer = { path = "crates/signer", version = "0.0.5" }
-rustfs-trusted-proxies = { path = "crates/trusted-proxies", version = "0.0.5" }
-rustfs-targets = { path = "crates/targets", version = "0.0.5" }
-rustfs-utils = { path = "crates/utils", version = "0.0.5" }
-rustfs-workers = { path = "crates/workers", version = "0.0.5" }
-rustfs-zip = { path = "./crates/zip", version = "0.0.5" }
-rustfs-protocols = { path = "crates/protocols", version = "0.0.5" }
-
-# Async Runtime and Networking
-async-channel = "2.5.0"
-async-compression = { version = "0.4.39" }
-async-recursion = "1.1.1"
-async-trait = "0.1.89"
-axum = "0.8.8"
-axum-server = { version = "0.8.0", features = ["tls-rustls"], default-features = false }
-futures = "0.3.31"
-futures-core = "0.3.31"
-futures-util = "0.3.31"
-pollster = "0.4.0"
-hyper = { version = "1.8.1", features = ["http2", "http1", "server"] }
-hyper-rustls = { version = "0.27.7", default-features = false, features = ["native-tokio", "http1", "tls12", "logging", "http2", "aws-lc-rs", "webpki-roots"] }
-hyper-util = { version = "0.1.20", features = ["tokio", "server-auto", "server-graceful", "tracing"] }
-http = "1.4.0"
-http-body = "1.0.1"
-http-body-util = "0.1.3"
-reqwest = { version = "0.13.2", default-features = false, features = ["rustls", "charset", "http2", "system-proxy", "stream", "json", "blocking", "query", "form"] }
-socket2 = { version = "0.6.2", features = ["all"] }
-tokio = { version = "1.49.0", features = ["fs", "rt-multi-thread"] }
-tokio-rustls = { version = "0.26.4", default-features = false, features = ["logging", "tls12", "aws-lc-rs"] }
-tokio-stream = { version = "0.1.18" }
-tokio-test = "0.4.5"
-tokio-util = { version = "0.7.18", features = ["io", "compat"] }
-tonic = { version = "0.14.3", features = ["gzip"] }
-tonic-prost = { version = "0.14.3" }
-tonic-prost-build = { version = "0.14.3" }
-tower = { version = "0.5.3", features = ["timeout"] }
-tower-http = { version = "0.6.8", features = ["cors"] }
-
-# Serialization and Data Formats
-bytes = { version = "1.11.1", features = ["serde"] }
-bytesize = "2.3.1"
-byteorder = "1.5.0"
-flatbuffers = "25.12.19"
-form_urlencoded = "1.2.2"
-prost = "0.14.3"
-quick-xml = "0.39.0"
-rmcp = { version = "0.15.0" }
-rmp = { version = "0.8.15" }
-rmp-serde = { version = "1.3.1" }
-serde = { version = "1.0.228", features = ["derive"] }
-serde_json = { version = "1.0.149", features = ["raw_value"] }
-serde_urlencoded = "0.7.1"
-schemars = "1.2.1"
-
-# Cryptography and Security
-aes-gcm = { version = "0.11.0-rc.3", features = ["rand_core"] }
-argon2 = { version = "0.6.0-rc.7" }
-blake3 = { version = "1.8.3", features = ["rayon", "mmap"] }
-chacha20poly1305 = { version = "0.11.0-rc.3" }
-crc-fast = "1.9.0"
-hmac = { version = "0.13.0-rc.5" }
-jsonwebtoken = { version = "10.3.0", features = ["aws_lc_rs"] }
-pbkdf2 = "0.13.0-rc.9"
-rsa = { version = "0.10.0-rc.15" }
-rustls = { version = "0.23.36", default-features = false, features = ["aws-lc-rs", "logging", "tls12", "prefer-post-quantum", "std"] }
-rustls-pemfile = "2.2.0"
-rustls-pki-types = "1.14.0"
-sha1 = "0.11.0-rc.5"
-sha2 = "0.11.0-rc.5"
-subtle = "2.6"
-zeroize = { version = "1.8.2", features = ["derive"] }
-
-# Time and Date
-chrono = { version = "0.4.43", features = ["serde"] }
-humantime = "2.3.0"
-jiff = { version = "0.2.19", features = ["serde"] }
-time = { version = "0.3.47", features = ["std", "parsing", "formatting", "macros", "serde"] }
-
-# Utilities and Tools
-anyhow = "1.0.101"
-arc-swap = "1.8.1"
-astral-tokio-tar = "0.5.6"
-atoi = "2.0.0"
-atomic_enum = "0.3.0"
-aws-config = { version = "1.8.13" }
-aws-credential-types = { version = "1.2.11" }
-aws-sdk-s3 = { version = "1.122.0", default-features = false, features = ["sigv4a", "default-https-client", "rt-tokio"] }
-aws-smithy-types = { version = "1.4.4" }
-backtrace = "0.3.76"
-base64 = "0.22.1"
-base64-simd = "0.8.0"
-brotli = "8.0.2"
-cfg-if = "1.0.4"
-clap = { version = "4.5.57", features = ["derive", "env"] }
-const-str = { version = "1.1.0", features = ["std", "proc"] }
-convert_case = "0.11.0"
-criterion = { version = "0.8", features = ["html_reports"] }
-crossbeam-queue = "0.3.12"
-datafusion = "52.1.0"
-derive_builder = "0.20.2"
-enumset = "1.1.10"
-faster-hex = "0.10.0"
-flate2 = "1.1.9"
-flexi_logger = { version = "0.31.8", features = ["trc", "dont_minimize_extra_stacks", "compress", "kv", "json"] }
-glob = "0.3.3"
-google-cloud-storage = "1.7.0"
-google-cloud-auth = "1.5.0"
-hashbrown = { version = "0.16.1", features = ["serde", "rayon"] }
-hex-simd = "0.8.0"
-highway = { version = "1.3.0" }
-ipnetwork = { version = "0.21.1", features = ["serde"] }
-lazy_static = "1.5.0"
-libc = "0.2.181"
-libsystemd = "0.7.2"
-local-ip-address = "0.6.10"
-lz4 = "1.28.1"
-matchit = "0.9.1"
-md-5 = "0.11.0-rc.5"
-md5 = "0.8.0"
-mime_guess = "2.0.5"
-moka = { version = "0.12.13", features = ["future"] }
-netif = "0.1.6"
-nu-ansi-term = "0.50.3"
-num_cpus = { version = "1.17.0" }
-nvml-wrapper = "0.11.0"
-object_store = "0.12.5"
-parking_lot = "0.12.5"
-path-absolutize = "3.1.1"
-path-clean = "1.0.1"
-pin-project-lite = "0.2.16"
-pretty_assertions = "1.4.1"
-rand = { version = "0.10.0", features = ["serde"] }
-rayon = "1.11.0"
-reed-solomon-simd = { version = "3.1.0" }
-regex = { version = "1.12.3" }
-rumqttc = { version = "0.25.1" }
-rustix = { version = "1.1.3", features = ["fs"] }
-rust-embed = { version = "8.11.0" }
-rustc-hash = { version = "2.1.1" }
-s3s = { version = "0.13.0-alpha.3", features = ["minio"], git = "https://github.com/s3s-project/s3s.git", rev = "7b8e22b49bc76839e6085a4ddfa553323f1b8049" }
-serial_test = "3.3.1"
-shadow-rs = { version = "1.7.0", default-features = false }
-siphasher = "1.0.2"
-smallvec = { version = "1.15.1", features = ["serde"] }
-smartstring = "1.0.1"
-snafu = "0.8.9"
-snap = "1.1.1"
-starshard = { version = "1.1.0", features = ["rayon", "async", "serde"] }
-strum = { version = "0.27.2", features = ["derive"] }
-sysinfo = "0.38.1"
-temp-env = "0.3.6"
-tempfile = "3.25.0"
-test-case = "3.3.1"
-thiserror = "2.0.18"
-tracing = { version = "0.1.44" }
-tracing-appender = "0.2.4"
-tracing-error = "0.2.1"
-tracing-opentelemetry = "0.32.1"
-tracing-subscriber = { version = "0.3.22", features = ["env-filter", "time"] }
-transform-stream = "0.3.1"
-url = "2.5.8"
-urlencoding = "2.1.3"
-uuid = { version = "1.20.0", features = ["v4", "fast-rng", "macro-diagnostics"] }
-vaultrs = { version = "0.7.4" }
-walkdir = "2.5.0"
-wildmatch = { version = "2.6.1", features = ["serde"] }
-windows = { version = "0.62.2" }
-xxhash-rust = { version = "0.8.15", features = ["xxh64", "xxh3"] }
-zip = "7.4.0"
-zstd = "0.13.3"
-
-# Observability and Metrics
-metrics = "0.24.3"
-opentelemetry = { version = "0.31.0" }
-opentelemetry-appender-tracing = { version = "0.31.1", features = ["experimental_use_tracing_span_context", "experimental_metadata_attributes", "spec_unstable_logs_enabled"] }
-opentelemetry-otlp = { version = "0.31.0", features = ["gzip-http", "reqwest-rustls"] }
-opentelemetry_sdk = { version = "0.31.0" }
-opentelemetry-semantic-conventions = { version = "0.31.0", features = ["semconv_experimental"] }
-opentelemetry-stdout = { version = "0.31.0" }
-
-# FTP and SFTP
-libunftp = { version = "0.22.0", features = ["experimental"] }
-suppaftp = { version = "8.0.1", features = ["tokio", "tokio-rustls-aws-lc-rs"] }
-rcgen = "0.14.7"
-
-# Performance Analysis and Memory Profiling
-mimalloc = "0.1"
-# Use tikv-jemallocator as memory allocator and enable performance analysis
-tikv-jemallocator = { version = "0.6", features = ["profiling", "stats", "unprefixed_malloc_on_supported_platforms", "background_threads"] }
-# Used to control and obtain statistics for jemalloc at runtime
-tikv-jemalloc-ctl = { version = "0.6", features = ["use_std", "stats", "profiling"] }
-# Used to generate pprof-compatible memory profiling data and support symbolization and flame graphs
-jemalloc_pprof = { version = "0.8.2", features = ["symbolize", "flamegraph"] }
-# Used to generate CPU performance analysis data and flame diagrams
-pprof = { version = "0.15.0", features = ["flamegraph", "protobuf-codec"] }
-
-[workspace.metadata.cargo-shear]
-ignored = ["rustfs", "rustfs-mcp"]
-
-[profile.release]
-opt-level = 3
-
-[profile.production]
-inherits = "release"
-lto = "fat"
-codegen-units = 1
-
-[profile.profiling]
-inherits = "release"
-debug = true
@@ -1,95 +0,0 @@
-FROM alpine:3.23 AS build
-
-ARG TARGETARCH
-ARG RELEASE=latest
-
-RUN apk add --no-cache ca-certificates curl unzip
-WORKDIR /build
-
-RUN set -eux; \
-    case "$TARGETARCH" in \
-      amd64)  ARCH_SUBSTR="x86_64-musl"  ;; \
-      arm64)  ARCH_SUBSTR="aarch64-musl" ;; \
-      *) echo "Unsupported TARGETARCH=$TARGETARCH" >&2; exit 1 ;; \
-    esac; \
-    if [ "$RELEASE" = "latest" ]; then \
-      TAG="$(curl -fsSL https://api.github.com/repos/rustfs/rustfs/releases \
-              | grep -o '"tag_name": "[^"]*"' | cut -d'"' -f4 | head -n 1)"; \
-    else \
-      TAG="$RELEASE"; \
-    fi; \
-    echo "Using tag: $TAG (arch pattern: $ARCH_SUBSTR)"; \
-    # Find download URL in assets list for this tag that contains arch substring and ends with .zip
-    URL="$(curl -fsSL "https://api.github.com/repos/rustfs/rustfs/releases/tags/$TAG" \
-           | grep -o "\"browser_download_url\": \"[^\"]*${ARCH_SUBSTR}[^\"]*\\.zip\"" \
-           | cut -d'"' -f4 | head -n 1)"; \
-    if [ -z "$URL" ]; then echo "Failed to locate release asset for $ARCH_SUBSTR at tag $TAG" >&2; exit 1; fi; \
-    echo "Downloading: $URL"; \
-    curl -fL "$URL" -o rustfs.zip; \
-    unzip -q rustfs.zip -d /build; \
-    # If binary is not in root directory, try to locate and move from zip to /build/rustfs
-    if [ ! -x /build/rustfs ]; then \
-      BIN_PATH="$(unzip -Z -1 rustfs.zip | grep -E '(^|/)rustfs$' | head -n 1 || true)"; \
-      if [ -n "$BIN_PATH" ]; then \
-        mkdir -p /build/.tmp && unzip -q rustfs.zip "$BIN_PATH" -d /build/.tmp && \
-        mv "/build/.tmp/$BIN_PATH" /build/rustfs; \
-      fi; \
-    fi; \
-    [ -x /build/rustfs ] || { echo "rustfs binary not found in asset" >&2; exit 1; }; \
-    chmod +x /build/rustfs; \
-    rm -rf rustfs.zip /build/.tmp || true
-
-
-FROM alpine:3.23
-
-ARG RELEASE=latest
-ARG BUILD_DATE
-ARG VCS_REF
-
-LABEL name="RustFS" \
-      vendor="RustFS Team" \
-      maintainer="RustFS Team <dev@rustfs.com>" \
-      version="v${RELEASE#v}" \
-      release="${RELEASE}" \
-      build-date="${BUILD_DATE}" \
-      vcs-ref="${VCS_REF}" \
-      summary="High-performance distributed object storage system compatible with S3 API" \
-      description="RustFS is a distributed object storage system written in Rust, supporting erasure coding, multi-tenant management, and observability." \
-      url="https://rustfs.com" \
-      license="Apache-2.0"
-
-RUN apk add --no-cache ca-certificates coreutils curl
-
-COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
-COPY --from=build /build/rustfs /usr/bin/rustfs
-COPY entrypoint.sh /entrypoint.sh
-
-RUN chmod +x /usr/bin/rustfs /entrypoint.sh
-
-RUN addgroup -g 10001 -S rustfs && \
-    adduser -u 10001 -G rustfs -S rustfs -D && \
-    mkdir -p /data /logs && \
-    chown -R rustfs:rustfs /data /logs && \
-    chmod 0750 /data /logs
-
-ENV RUSTFS_ADDRESS=":9000" \
-    RUSTFS_CONSOLE_ADDRESS=":9001" \
-    RUSTFS_ACCESS_KEY="rustfsadmin" \
-    RUSTFS_SECRET_KEY="rustfsadmin" \
-    RUSTFS_CONSOLE_ENABLE="true" \
-    RUSTFS_CORS_ALLOWED_ORIGINS="*" \
-    RUSTFS_CONSOLE_CORS_ALLOWED_ORIGINS="*" \
-    RUSTFS_VOLUMES="/data" \
-    RUSTFS_OBS_LOGGER_LEVEL=warn \
-    RUSTFS_OBS_LOG_DIRECTORY=/logs \
-    RUSTFS_OBS_ENVIRONMENT=production
-    
-EXPOSE 9000 9001
-
-VOLUME ["/data"]
-
-USER rustfs
-
-ENTRYPOINT ["/entrypoint.sh"]
-
-CMD ["rustfs"]
@@ -1,101 +0,0 @@
-FROM ubuntu:24.04 AS build
-
-ARG TARGETARCH
-ARG RELEASE=latest
-
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    ca-certificates \
-    curl \
-    unzip \
-    && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /build
-
-RUN set -eux; \
-    case "$TARGETARCH" in \
-      amd64)  ARCH_SUBSTR="x86_64-gnu"  ;; \
-      arm64)  ARCH_SUBSTR="aarch64-gnu" ;; \
-      *) echo "Unsupported TARGETARCH=$TARGETARCH" >&2; exit 1 ;; \
-    esac; \
-    \
-    if [ "$RELEASE" = "latest" ]; then \
-      TAG="$(curl -fsSL https://api.github.com/repos/rustfs/rustfs/releases \
-              | grep -o '"tag_name": "[^"]*"' | cut -d'"' -f4 | head -n 1)"; \
-    else \
-      TAG="$RELEASE"; \
-    fi; \
-    \
-    URL="$(curl -fsSL "https://api.github.com/repos/rustfs/rustfs/releases/tags/$TAG" \
-           | grep -o "\"browser_download_url\": \"[^\"]*${ARCH_SUBSTR}[^\"]*\\.zip\"" \
-           | cut -d'"' -f4 | head -n 1)"; \
-    \
-    if [ -z "$URL" ]; then echo "Failed to locate release asset for $ARCH_SUBSTR at tag $TAG" >&2; exit 1; fi; \
-    \
-    curl -fL "$URL" -o rustfs.zip; \
-    unzip -q rustfs.zip -d /build; \
-    \
-    if [ ! -x /build/rustfs ]; then \
-      BIN_PATH="$(unzip -Z -1 rustfs.zip | grep -E '(^|/)rustfs$' | head -n 1 || true)"; \
-      if [ -n "$BIN_PATH" ]; then \
-        mkdir -p /build/.tmp && unzip -q rustfs.zip "$BIN_PATH" -d /build/.tmp && \
-        mv "/build/.tmp/$BIN_PATH" /build/rustfs; \
-      fi; \
-    fi; \
-    [ -x /build/rustfs ] || { echo "rustfs binary not found in asset" >&2; exit 1; }; \
-    chmod +x /build/rustfs; \
-    rm -rf rustfs.zip /build/.tmp || true
-
-FROM ubuntu:24.04
-
-ARG RELEASE=latest
-ARG BUILD_DATE
-ARG VCS_REF
-
-LABEL name="RustFS" \
-      vendor="RustFS Team" \
-      maintainer="RustFS Team <dev@rustfs.com>" \
-      version="v${RELEASE#v}" \
-      release="${RELEASE}" \
-      build-date="${BUILD_DATE}" \
-      vcs-ref="${VCS_REF}" \
-      summary="High-performance distributed object storage system (glibc)" \
-      url="https://rustfs.com" \
-      license="Apache-2.0"
-
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    ca-certificates \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
-
-COPY --from=build /build/rustfs /usr/bin/rustfs
-COPY entrypoint.sh /entrypoint.sh
-
-RUN chmod +x /usr/bin/rustfs /entrypoint.sh
-
-RUN groupadd -g 10001 rustfs && \
-    useradd -u 10001 -g rustfs -m -s /sbin/nologin rustfs && \
-    mkdir -p /data /logs && \
-    chown -R rustfs:rustfs /data /logs && \
-    chmod 0750 /data /logs
-
-ENV RUSTFS_ADDRESS=":9000" \
-    RUSTFS_CONSOLE_ADDRESS=":9001" \
-    RUSTFS_ACCESS_KEY="rustfsadmin" \
-    RUSTFS_SECRET_KEY="rustfsadmin" \
-    RUSTFS_CONSOLE_ENABLE="true" \
-    RUSTFS_CORS_ALLOWED_ORIGINS="*" \
-    RUSTFS_CONSOLE_CORS_ALLOWED_ORIGINS="*" \
-    RUSTFS_VOLUMES="/data" \
-    RUSTFS_OBS_LOGGER_LEVEL=warn \
-    RUSTFS_OBS_LOG_DIRECTORY=/logs \
-    RUSTFS_OBS_ENVIRONMENT=production
-    
-EXPOSE 9000 9001
-
-VOLUME ["/data"]
-
-USER rustfs
-
-ENTRYPOINT ["/entrypoint.sh"]
-
-CMD ["rustfs"]
@@ -1,227 +0,0 @@
-# syntax=docker/dockerfile:1.6
-# Multi-stage Dockerfile for RustFS - LOCAL DEVELOPMENT ONLY
-#
-# IMPORTANT: This Dockerfile builds RustFS from source for local development and testing.
-# CI/CD uses the production Dockerfile with prebuilt binaries instead.
-#
-# Example:
-#   docker build -f Dockerfile.source -t rustfs:dev-local .
-#   docker run --rm -p 9000:9000 rustfs:dev-local
-#
-# Supports cross-compilation for amd64 and arm64 via TARGETPLATFORM.
-
-ARG TARGETPLATFORM
-ARG BUILDPLATFORM
-
-# -----------------------------
-# Build stage
-# -----------------------------
-FROM rust:1.91-trixie AS builder
-
-# Re-declare args after FROM
-ARG TARGETPLATFORM
-ARG BUILDPLATFORM
-
-# Debug: print platforms
-RUN echo "Build info -> BUILDPLATFORM=${BUILDPLATFORM}, TARGETPLATFORM=${TARGETPLATFORM}"
-
-# Install build toolchain and headers
-# Use distro packages for protoc/flatc to avoid host-arch mismatch
-RUN set -eux; \
-    export DEBIAN_FRONTEND=noninteractive; \
-    apt-get update; \
-    apt-get install -y --no-install-recommends \
-    build-essential \
-    ca-certificates \
-    curl \
-    git \
-    pkg-config \
-    libssl-dev \
-    lld \
-    protobuf-compiler \
-    flatbuffers-compiler \
-    gcc-aarch64-linux-gnu \
-    gcc-x86-64-linux-gnu; \
-    rm -rf /var/lib/apt/lists/*
-
-# Optional: cross toolchain for aarch64 (only when targeting linux/arm64)
-RUN set -eux; \
-    if [ "${TARGETPLATFORM:-linux/amd64}" = "linux/arm64" ]; then \
-    export DEBIAN_FRONTEND=noninteractive; \
-    apt-get update; \
-    apt-get install -y --no-install-recommends gcc-aarch64-linux-gnu; \
-    rm -rf /var/lib/apt/lists/*; \
-    fi
-
-# Add Rust targets for both arches (to support cross-builds on multi-arch runners)
-RUN set -eux; \
-    rustup target add x86_64-unknown-linux-gnu aarch64-unknown-linux-gnu; \
-    rustup component add rust-std-x86_64-unknown-linux-gnu rust-std-aarch64-unknown-linux-gnu
-
-# Cross-compilation environment (used only when targeting aarch64)
-ENV CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc
-ENV CC_aarch64_unknown_linux_gnu=aarch64-linux-gnu-gcc
-ENV CXX_aarch64_unknown_linux_gnu=aarch64-linux-gnu-g++
-ENV CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_LINKER=x86_64-linux-gnu-gcc
-ENV CC_x86_64_unknown_linux_gnu=x86_64-linux-gnu-gcc
-ENV CXX_x86_64_unknown_linux_gnu=x86_64-linux-gnu-g++
-
-WORKDIR /usr/src/rustfs
-
-# Layered copy to maximize caching:
-# 1) top-level manifests
-COPY Cargo.toml Cargo.lock ./
-# 2) workspace member manifests (adjust if workspace layout changes)
-COPY rustfs/Cargo.toml rustfs/Cargo.toml
-COPY crates/*/Cargo.toml crates/
-
-# Pre-fetch dependencies for better caching
-RUN --mount=type=cache,target=/usr/local/cargo/registry \
-    --mount=type=cache,target=/usr/local/cargo/git \
-    cargo fetch --locked || true
-
-# 3) copy full sources (this is the main cache invalidation point)
-COPY . .
-
-# Generate static files
-
-RUN ./scripts/static.sh
-
-# Cargo build configuration for lean release artifacts
-ENV CARGO_NET_GIT_FETCH_WITH_CLI=true \
-    CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse \
-    CARGO_INCREMENTAL=0 \
-    CARGO_PROFILE_RELEASE_DEBUG=false \
-    CARGO_PROFILE_RELEASE_SPLIT_DEBUGINFO=off \
-    CARGO_PROFILE_RELEASE_STRIP=symbols
-
-# Generate protobuf/flatbuffers code (uses protoc/flatc from distro)
-RUN --mount=type=cache,target=/usr/local/cargo/registry \
-    --mount=type=cache,target=/usr/local/cargo/git \
-    --mount=type=cache,target=/usr/src/rustfs/target \
-    cargo run --bin gproto
-
-# Build RustFS (target depends on TARGETPLATFORM)
-RUN --mount=type=cache,target=/usr/local/cargo/registry \
-    --mount=type=cache,target=/usr/local/cargo/git \
-    --mount=type=cache,target=/usr/src/rustfs/target \
-    set -eux; \
-    case "${TARGETPLATFORM:-linux/amd64}" in \
-    linux/amd64) \
-    echo "Building for x86_64-unknown-linux-gnu"; \
-    cargo build --release --locked --target x86_64-unknown-linux-gnu --bin rustfs -j "$(nproc)"; \
-    install -m 0755 target/x86_64-unknown-linux-gnu/release/rustfs /usr/local/bin/rustfs \
-    ;; \
-    linux/arm64) \
-    echo "Building for aarch64-unknown-linux-gnu"; \
-    cargo build --release --locked --target aarch64-unknown-linux-gnu --bin rustfs -j "$(nproc)"; \
-    install -m 0755 target/aarch64-unknown-linux-gnu/release/rustfs /usr/local/bin/rustfs \
-    ;; \
-    *) \
-    echo "Unsupported TARGETPLATFORM=${TARGETPLATFORM}" >&2; exit 1 \
-    ;; \
-    esac
-
-# -----------------------------
-# Development stage (keeps toolchain)
-# -----------------------------
-FROM builder AS dev
-
-ARG BUILD_DATE
-ARG VCS_REF
-
-LABEL name="RustFS (dev-source)" \
-    maintainer="RustFS Team" \
-    build-date="${BUILD_DATE}" \
-    vcs-ref="${VCS_REF}" \
-    description="RustFS - local development with Rust toolchain."
-
-# Install runtime dependencies that might be missing in partial builder
-# (builder already has build-essential, lld, etc.)
-WORKDIR /app
-
-ENV CARGO_INCREMENTAL=1
-
-# Ensure we have the same default env vars available
-ENV RUSTFS_ADDRESS=":9000" \
-    RUSTFS_ACCESS_KEY="rustfsadmin" \
-    RUSTFS_SECRET_KEY="rustfsadmin" \
-    RUSTFS_CONSOLE_ENABLE="true" \
-    RUSTFS_VOLUMES="/data" \
-    RUST_LOG="warn" \
-    RUSTFS_OBS_LOG_DIRECTORY="/logs" \
-    RUSTFS_USERNAME="rustfs" \
-    RUSTFS_GROUPNAME="rustfs" \
-    RUSTFS_UID="10001" \
-    RUSTFS_GID="10001"
-
-# Note: We don't COPY source here because we expect it to be mounted at /app
-# We rely on cargo run to build and run
-EXPOSE 9000 9001
-
-COPY entrypoint.sh /entrypoint.sh
-RUN chmod +x /entrypoint.sh
-
-ENTRYPOINT ["/entrypoint.sh"]
-CMD ["cargo", "run", "--bin", "rustfs", "--"]
-
-# -----------------------------
-# Runtime stage (Ubuntu minimal)
-# -----------------------------
-FROM ubuntu:22.04
-
-ARG BUILD_DATE
-ARG VCS_REF
-
-LABEL name="RustFS (dev-local)" \
-    maintainer="RustFS Team" \
-    build-date="${BUILD_DATE}" \
-    vcs-ref="${VCS_REF}" \
-    description="RustFS - local development image built from source (NOT for production)."
-
-# Minimal runtime deps: certificates + tzdata + coreutils (for chroot --userspec)
-RUN set -eux; \
-    export DEBIAN_FRONTEND=noninteractive; \
-    apt-get update; \
-    apt-get install -y --no-install-recommends \
-    ca-certificates \
-    tzdata \
-    coreutils; \
-    rm -rf /var/lib/apt/lists/*
-
-# Create a conventional runtime user/group (final switch happens in entrypoint via chroot --userspec)
-RUN set -eux; \
-    groupadd -g 10001 rustfs; \
-    useradd -u 10001 -g rustfs -M -s /usr/sbin/nologin rustfs
-
-WORKDIR /app
-
-# Prepare data/log directories with sane defaults
-RUN set -eux; \
-    mkdir -p /data /logs; \
-    chown -R rustfs:rustfs /data /logs /app; \
-    chmod 0750 /data /logs
-
-# Copy the freshly built binary and the entrypoint
-COPY --from=builder /usr/local/bin/rustfs /usr/bin/rustfs
-COPY entrypoint.sh /entrypoint.sh
-RUN chmod +x /usr/bin/rustfs /entrypoint.sh
-
-# Default environment (override in docker run/compose as needed)
-ENV RUSTFS_ADDRESS=":9000" \
-    RUSTFS_ACCESS_KEY="rustfsadmin" \
-    RUSTFS_SECRET_KEY="rustfsadmin" \
-    RUSTFS_CONSOLE_ENABLE="true" \
-    RUSTFS_VOLUMES="/data" \
-    RUST_LOG="warn" \
-    RUSTFS_USERNAME="rustfs" \
-    RUSTFS_GROUPNAME="rustfs" \
-    RUSTFS_UID="10001" \
-    RUSTFS_GID="10001"
-
-EXPOSE 9000
-VOLUME ["/data"]
-
-# Keep root here; entrypoint will drop privileges using chroot --userspec
-ENTRYPOINT ["/entrypoint.sh"]
-CMD ["/usr/bin/rustfs"]
@@ -1,258 +0,0 @@
-DOCKER_CLI := env("DOCKER_CLI", "docker")
-IMAGE_NAME := env("IMAGE_NAME", "rustfs:v1.0.0")
-DOCKERFILE_SOURCE := env("DOCKERFILE_SOURCE", "Dockerfile.source")
-DOCKERFILE_PRODUCTION := env("DOCKERFILE_PRODUCTION", "Dockerfile")
-CONTAINER_NAME := env("CONTAINER_NAME", "rustfs-dev")
-
-[group("📒 Help")]
-[private]
-default:
-    @just --list --list-heading $'🦀 RustFS justfile manual page:\n'
-
-[doc("show help")]
-[group("📒 Help")]
-help: default
-
-[doc("run `cargo fmt` to format codes")]
-[group("👆 Code Quality")]
-fmt:
-    @echo "🔧 Formatting code..."
-    cargo fmt --all
-
-[doc("run `cargo fmt` in check mode")]
-[group("👆 Code Quality")]
-fmt-check:
-    @echo "📝 Checking code formatting..."
-    cargo fmt --all --check
-
-[doc("run `cargo clippy`")]
-[group("👆 Code Quality")]
-clippy:
-    @echo "🔍 Running clippy checks..."
-    cargo clippy --all-targets --all-features --fix --allow-dirty -- -D warnings
-
-[doc("run `cargo check`")]
-[group("👆 Code Quality")]
-check:
-    @echo "🔨 Running compilation check..."
-    cargo check --all-targets
-
-[doc("run `cargo test`")]
-[group("👆 Code Quality")]
-test:
-    @echo "🧪 Running tests..."
-    cargo nextest run --all --exclude e2e_test
-    cargo test --all --doc
-
-[doc("run `fmt` `clippy` `check` `test` at once")]
-[group("👆 Code Quality")]
-pre-commit: fmt clippy check test
-    @echo "✅ All pre-commit checks passed!"
-
-[group("🤔 Git")]
-setup-hooks:
-    @echo "🔧 Setting up git hooks..."
-    chmod +x .git/hooks/pre-commit
-    @echo "✅ Git hooks setup complete!"
-
-[doc("use `release` mode for building")]
-[group("🔨 Build")]
-build:
-    @echo "🔨 Building RustFS using build-rustfs.sh script..."
-    ./build-rustfs.sh
-
-[doc("use `debug` mode for building")]
-[group("🔨 Build")]
-build-dev:
-    @echo "🔨 Building RustFS in development mode..."
-    ./build-rustfs.sh --dev
-
-[group("🔨 Build")]
-[private]
-build-target target:
-    @echo "🔨 Building rustfs for {{ target }}..."
-    @echo "💡 On macOS/Windows, use 'make build-docker' or 'make docker-dev' instead"
-    ./build-rustfs.sh --platform {{ target }}
-
-[doc("use `x86_64-unknown-linux-musl` target for building")]
-[group("🔨 Build")]
-build-musl: (build-target "x86_64-unknown-linux-musl")
-
-[doc("use `x86_64-unknown-linux-gnu` target for building")]
-[group("🔨 Build")]
-build-gnu: (build-target "x86_64-unknown-linux-gnu")
-
-[doc("use `aarch64-unknown-linux-musl` target for building")]
-[group("🔨 Build")]
-build-musl-arm64: (build-target "aarch64-unknown-linux-musl")
-
-[doc("use `aarch64-unknown-linux-gnu` target for building")]
-[group("🔨 Build")]
-build-gnu-arm64: (build-target "aarch64-unknown-linux-gnu")
-
-[doc("build and deploy to server")]
-[group("🔨 Build")]
-deploy-dev ip: build-musl
-    @echo "🚀 Deploying to dev server: {{ ip }}"
-    ./scripts/dev_deploy.sh {{ ip }}
-
-[group("🔨 Build")]
-[private]
-build-cross-all-pre:
-    @echo "🔧 Building all target architectures..."
-    @echo "💡 On macOS/Windows, use 'make docker-dev' for reliable multi-arch builds"
-    @echo "🔨 Generating protobuf code..."
-    -cargo run --bin gproto
-
-[doc("build all targets at once")]
-[group("🔨 Build")]
-build-cross-all: build-cross-all-pre && build-gnu build-gnu-arm64 build-musl build-musl-arm64
-
-# ========================================================================================
-# Docker Multi-Architecture Builds (Primary Methods)
-# ========================================================================================
-
-[doc("build an image and run it")]
-[group("🐳 Build Image")]
-build-docker os="rockylinux9.3" cli=(DOCKER_CLI) dockerfile=(DOCKERFILE_SOURCE):
-    #!/usr/bin/env bash
-    SOURCE_BUILD_IMAGE_NAME="rustfs/rustfs-{{ os }}:v1"
-    SOURCE_BUILD_CONTAINER_NAME="rustfs-{{ os }}-build"
-    BUILD_CMD="/root/.cargo/bin/cargo build --release --bin rustfs --target-dir /root/s3-rustfs/target/{{ os }}"
-    echo "🐳 Building RustFS using Docker ({{ os }})..."
-    {{ cli }} buildx build -t $SOURCE_BUILD_IMAGE_NAME -f {{ dockerfile }} .
-    {{ cli }} run --rm --name $SOURCE_BUILD_CONTAINER_NAME -v $(pwd):/root/s3-rustfs -it $SOURCE_BUILD_IMAGE_NAME $BUILD_CMD
-
-[doc("build an image")]
-[group("🐳 Build Image")]
-docker-buildx:
-    @echo "🏗️ Building multi-architecture production Docker images with buildx..."
-    ./docker-buildx.sh
-
-[doc("build an image and push it")]
-[group("🐳 Build Image")]
-docker-buildx-push:
-    @echo "🚀 Building and pushing multi-architecture production Docker images with buildx..."
-    ./docker-buildx.sh --push
-
-[doc("build an image with a version")]
-[group("🐳 Build Image")]
-docker-buildx-version version:
-    @echo "🏗️ Building multi-architecture production Docker images (version: {{ version }}..."
-    ./docker-buildx.sh --release {{ version }}
-
-[doc("build an image with a version and push it")]
-[group("🐳 Build Image")]
-docker-buildx-push-version version:
-    @echo "🚀 Building and pushing multi-architecture production Docker images (version: {{ version }}..."
-    ./docker-buildx.sh --release {{ version }} --push
-
-[doc("build an image with a version and push it to registry")]
-[group("🐳 Build Image")]
-docker-dev-push registry cli=(DOCKER_CLI) source=(DOCKERFILE_SOURCE):
-    @echo "🚀 Building and pushing multi-architecture development Docker images..."
-    @echo "💡 push to registry: {{ registry }}"
-    {{ cli }} buildx build \
-    	--platform linux/amd64,linux/arm64 \
-    	--file {{ source }} \
-    	--tag {{ registry }}/rustfs:source-latest \
-    	--tag {{ registry }}/rustfs:dev-latest \
-    	--push \
-    	.
-
-# Local production builds using direct buildx (alternative to docker-buildx.sh)
-
-[group("🐳 Build Image")]
-docker-buildx-production-local cli=(DOCKER_CLI) source=(DOCKERFILE_PRODUCTION):
-    @echo "🏗️ Building single-architecture production Docker image locally..."
-    @echo "💡 Alternative to docker-buildx.sh for local testing"
-    {{ cli }} buildx build \
-    	--file {{ source }} \
-    	--tag rustfs:production-latest \
-    	--tag rustfs:latest \
-    	--load \
-    	--build-arg RELEASE=latest \
-    	.
-
-# Development/Source builds using direct buildx commands
-
-[group("🐳 Build Image")]
-docker-dev cli=(DOCKER_CLI) source=(DOCKERFILE_SOURCE):
-    @echo "🏗️ Building multi-architecture development Docker images with buildx..."
-    @echo "💡 This builds from source code and is intended for local development and testing"
-    @echo "⚠️  Multi-arch images cannot be loaded locally, use docker-dev-push to push to registry"
-    {{ cli }} buildx build \
-    	--platform linux/amd64,linux/arm64 \
-    	--file {{ source }} \
-    	--tag rustfs:source-latest \
-    	--tag rustfs:dev-latest \
-    	.
-
-[group("🐳 Build Image")]
-docker-dev-local cli=(DOCKER_CLI) source=(DOCKERFILE_SOURCE):
-    @echo "🏗️ Building single-architecture development Docker image for local use..."
-    @echo "💡 This builds from source code for the current platform and loads locally"
-    {{ cli }} buildx build \
-    	--file {{ source }} \
-    	--tag rustfs:source-latest \
-    	--tag rustfs:dev-latest \
-    	--load \
-    	.
-
-# ========================================================================================
-# Single Architecture Docker Builds (Traditional)
-# ========================================================================================
-
-[group("🐳 Build Image")]
-docker-build-production cli=(DOCKER_CLI) source=(DOCKERFILE_PRODUCTION):
-    @echo "🏗️ Building single-architecture production Docker image..."
-    @echo "💡 Consider using 'make docker-buildx-production-local' for multi-arch support"
-    {{ cli }} build -f {{ source }} -t rustfs:latest .
-
-[group("🐳 Build Image")]
-docker-build-source cli=(DOCKER_CLI) source=(DOCKERFILE_SOURCE):
-    @echo "🏗️ Building single-architecture source Docker image..."
-    @echo "💡 Consider using 'make docker-dev-local' for multi-arch support"
-    {{ cli }} build -f {{ source }} -t rustfs:source .
-
-# ========================================================================================
-# Development Environment
-# ========================================================================================
-
-[group("🏃 Running")]
-dev-env-start cli=(DOCKER_CLI) source=(DOCKERFILE_SOURCE) container=(CONTAINER_NAME):
-    @echo "🚀 Starting development environment..."
-    {{ cli }} buildx build \
-    	--file {{ source }} \
-    	--tag rustfs:dev \
-    	--load \
-    	.
-    -{{ cli }} stop {{ container }} 2>/dev/null
-    -{{ cli }} rm {{ container }} 2>/dev/null
-    {{ cli }} run -d --name {{ container }} \
-    	-p 9010:9010 -p 9000:9000 \
-    	-v {{ invocation_directory() }}:/workspace \
-    	-it rustfs:dev
-
-[group("🏃 Running")]
-dev-env-stop cli=(DOCKER_CLI) container=(CONTAINER_NAME):
-    @echo "🛑 Stopping development environment..."
-    -{{ cli }} stop {{ container }} 2>/dev/null
-    -{{ cli }}  rm {{ container }} 2>/dev/null
-
-[group("🏃 Running")]
-dev-env-restart: dev-env-stop dev-env-start
-
-[group("👍 E2E")]
-e2e-server:
-    sh scripts/run.sh
-
-[group("👍 E2E")]
-probe-e2e:
-    sh scripts/probe.sh
-
-[doc("inspect one image")]
-[group("🚚 Other")]
-docker-inspect-multiarch image cli=(DOCKER_CLI):
-    @echo "🔍 Inspecting multi-architecture image: {{ image }}"
-    {{ cli }} buildx imagetools inspect {{ image }}
@@ -1,201 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright 2024 Beijing Henghesha Technology Co., Ltd. 
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
@@ -1,81 +0,0 @@
-###########
-# Remote development requires VSCode with Dev Containers, Remote SSH, Remote Explorer
-# https://code.visualstudio.com/docs/remote/containers
-###########
-
-.PHONY: SHELL
-
-# Makefile global config
-# Use config.mak to override any of the following variables.
-# Do not make changes here.
-
-.DEFAULT_GOAL := help
-.EXPORT_ALL_VARIABLES:
-.ONESHELL:
-.SILENT:
-
-NUM_CORES := $(shell nproc 2>/dev/null || sysctl -n hw.ncpu)
-
-MAKEFLAGS += -j$(NUM_CORES) -l$(NUM_CORES)
-MAKEFLAGS += --silent
-
-SHELL := $(shell which bash)
-.SHELLFLAGS = -eu -o pipefail -c
-
-DOCKER_CLI ?= docker
-IMAGE_NAME ?= rustfs:v1.0.0
-CONTAINER_NAME ?= rustfs-dev
-# Docker build configurations
-DOCKERFILE_PRODUCTION = Dockerfile
-DOCKERFILE_SOURCE = Dockerfile.source
-BUILD_OS ?= rockylinux9.3
-
-# Makefile colors config
-bold := $(shell tput bold)
-normal := $(shell tput sgr0)
-errorTitle := $(shell tput setab 1 && tput bold && echo '\n')
-recommendation := $(shell tput setab 4)
-underline := $(shell tput smul)
-reset := $(shell tput -Txterm sgr0)
-black := $(shell tput setaf 0)
-red := $(shell tput setaf 1)
-green := $(shell tput setaf 2)
-yellow := $(shell tput setaf 3)
-blue := $(shell tput setaf 4)
-magenta := $(shell tput setaf 5)
-cyan := $(shell tput setaf 6)
-white := $(shell tput setaf 7)
-
-define HEADER
-How to use me:
-	# To get help for each target
-	${bold}make help${reset}
-
-	# To run and execute a target
-	${bold}make ${cyan}<target>${reset}
-
-	💡 For more help use 'make help', 'make help-build' or 'make help-docker'
-
-	🦀 RustFS Makefile Help:
-
-	📋 Main Command Categories:
-	 	make help-build                          # Show build-related help
-	 	make help-docker                         # Show Docker-related help
-
-	🔧 Code Quality:
-		make fmt                                 # Format code
-		make clippy                              # Run clippy checks
-		make test                                # Run tests
-		make pre-commit                          # Run all pre-commit checks
-
-	🚀 Quick Start:
-		make build                               # Build RustFS binary
-		make docker-dev-local                    # Build development Docker image (local)
-		make dev-env-start                       # Start development environment
-
-
-endef
-export HEADER
-
-include $(addsuffix /*.mak, $(shell find .config/make -type d))
-
@@ -1,247 +0,0 @@
-[![RustFS](https://github.com/user-attachments/assets/1b5afcd6-a2c3-47ff-8bc3-ce882b0ddca7)](https://rustfs.com)
-
-<p align="center">RustFS is a high-performance, distributed object storage system built in Rust.</p>
-
-<p align="center">
-  <a href="https://github.com/rustfs/rustfs/actions/workflows/ci.yml"><img alt="CI" src="https://github.com/rustfs/rustfs/actions/workflows/ci.yml/badge.svg" /></a>
-  <a href="https://github.com/rustfs/rustfs/actions/workflows/docker.yml"><img alt="Build and Push Docker Images" src="https://github.com/rustfs/rustfs/actions/workflows/docker.yml/badge.svg" /></a>
-  <img alt="GitHub commit activity" src="https://img.shields.io/github/commit-activity/m/rustfs/rustfs"/>
-  <img alt="Github Last Commit" src="https://img.shields.io/github/last-commit/rustfs/rustfs"/>
-  <a href="https://hellogithub.com/repository/rustfs/rustfs" target="_blank"><img src="https://abroad.hellogithub.com/v1/widgets/recommend.svg?rid=b95bcb72bdc340b68f16fdf6790b7d5b&claim_uid=MsbvjYeLDKAH457&theme=small" alt="Featured｜HelloGitHub" /></a>
-</p>
-
-<p align="center">
-<a href="https://trendshift.io/repositories/14181" target="_blank"><img src="https://trendshift.io/api/badge/repositories/14181" alt="rustfs%2Frustfs | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a> 
-<a href="https://runacap.com/ross-index/q4-2025/" target="_blank" rel="noopener"><img style="width: 260px; height: 55px" src="https://runacap.com/wp-content/uploads/2026/01/ROSS_badge_white_Q4_2025.svg" alt="ROSS Index - Fastest Growing Open-Source Startups in Q4 2025 | Runa Capital" height="55" /></a>
-</p>
-
-<p align="center">
-  <a href="https://docs.rustfs.com/installation/">Getting Started</a>
-  · <a href="https://docs.rustfs.com/">Docs</a>
-  · <a href="https://github.com/rustfs/rustfs/issues">Bug reports</a>
-  · <a href="https://github.com/rustfs/rustfs/discussions">Discussions</a>
-</p>
-
-<p align="center">
-English | <a href="https://github.com/rustfs/rustfs/blob/main/README_ZH.md">简体中文</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=de">Deutsch</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=es">Español</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=fr">français</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=ja">日本語</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=ko">한국어</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=pt">Portuguese</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=ru">Русский</a>
-</p>
-
-RustFS is a high-performance, distributed object storage system built in Rust—one of the most loved programming languages worldwide. RustFS combines the simplicity of MinIO with the memory safety and raw performance of Rust. It offers full S3 compatibility, is completely open-source, and is optimized for data lakes, AI, and big data workloads.
-
-Unlike other storage systems, RustFS is released under the permissible Apache 2.0 license, avoiding the restrictions of AGPL. With Rust as its foundation, RustFS delivers superior speed and secure distributed features for next-generation object storage.
-
-## Feature & Status
-
- **High Performance**: Built with Rust to ensure maximum speed and resource efficiency.
- **Distributed Architecture**: Scalable and fault-tolerant design suitable for large-scale deployments.
- **S3 Compatibility**: Seamless integration with existing S3-compatible applications and tools.
- **Data Lake Support**: Optimized for high-throughput big data and AI workloads.
- **Open Source**: Licensed under Apache 2.0, encouraging unrestricted community contributions and commercial usage.
- **User-Friendly**: Designed with simplicity in mind for easy deployment and management.
-
-| Feature                 | Status       | Feature                  | Status           |
-| :---------------------- | :----------- | :----------------------- | :--------------- |
-| **S3 Core Features**    | ✅ Available | **Bitrot Protection**    | ✅ Available     |
-| **Upload / Download**   | ✅ Available | **Single Node Mode**     | ✅ Available     |
-| **Versioning**          | ✅ Available | **Bucket Replication**   | ✅ Available     |
-| **Logging**             | ✅ Available | **Lifecycle Management** | 🚧 Under Testing |
-| **Event Notifications** | ✅ Available | **Distributed Mode**     | 🚧 Under Testing |
-| **K8s Helm Charts**     | ✅ Available | **RustFS KMS**           | 🚧 Under Testing |
-
-## RustFS vs MinIO Performance
-
-**Stress Test Environment:**
-
-| Type    | Parameter | Remark                                                   |
-| ------- | --------- | -------------------------------------------------------- |
-| CPU     | 2 Core    | Intel Xeon (Sapphire Rapids) Platinum 8475B, 2.7/3.2 GHz |
-| Memory  | 4GB       |                                                          |
-| Network | 15Gbps    |                                                          |
-| Drive   | 40GB x 4  | IOPS 3800 / Drive                                        |
-
-<https://github.com/user-attachments/assets/2e4979b5-260c-4f2c-ac12-c87fd558072a>
-
-### RustFS vs Other Object Storage
-
-| Feature                | RustFS                                                                                                                                                | Other Object Storage                                                                     |
-| :--------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------- | :--------------------------------------------------------------------------------------- |
-| **Console Experience** | **Powerful Console**<br>Comprehensive management interface.                                                                                           | **Basic / Limited Console**<br>Often overly simple or lacking critical features.         |
-| **Language & Safety**  | **Rust-based**<br>Memory safety by design.                                                                                                            | **Go or C-based**<br>Potential for memory GC pauses or leaks.                            |
-| **Data Sovereignty**   | **No Telemetry / Full Compliance**<br>Guards against unauthorized cross-border data egress. Compliant with GDPR (EU/UK), CCPA (US), and APPI (Japan). | **Potential Risk**<br>Possible legal exposure and unwanted data telemetry.               |
-| **Licensing**          | **Permissive Apache 2.0**<br>Business-friendly, no "poison pill" clauses.                                                                             | **Restrictive AGPL v3**<br>Risk of license traps and intellectual property pollution.    |
-| **Compatibility**      | **100% S3 Compatible**<br>Works with any cloud provider or client, anywhere.                                                                          | **Variable Compatibility**<br>May lack support for local cloud vendors or specific APIs. |
-| **Edge & IoT**         | **Strong Edge Support**<br>Ideal for secure, innovative edge devices.                                                                                 | **Weak Edge Support**<br>Often too heavy for edge gateways.                              |
-| **Risk Profile**       | **Enterprise Risk Mitigation**<br>Clear IP rights and safe for commercial use.                                                                        | **Legal Risks**<br>Intellectual property ambiguity and usage restrictions.               |
-
-## Staying ahead
-
-Star RustFS on GitHub and be instantly notified of new releases.
-
-<img src="https://github.com/user-attachments/assets/7ee40bb4-3e46-4eac-b0d0-5fbeb85ff8f3" />
-
-## Quickstart
-
-To get started with RustFS, follow these steps:
-
-### 1. One-click Installation (Option 1)
-
-```bash
-curl -O https://rustfs.com/install_rustfs.sh && bash install_rustfs.sh
-```
-
-### 2\. Docker Quick Start (Option 2)
-
-The RustFS container runs as a non-root user `rustfs` (UID `10001`). If you run Docker with `-v` to mount a host directory, please ensure the host directory owner is set to `10001`, otherwise you will encounter permission denied errors.
-
-```bash
- # Create data and logs directories
- mkdir -p data logs
-
- # Change the owner of these directories
- chown -R 10001:10001 data logs
-
- # Using latest version
- docker run -d -p 9000:9000 -p 9001:9001 -v $(pwd)/data:/data -v $(pwd)/logs:/logs rustfs/rustfs:latest
-
- # Using specific version
- docker run -d -p 9000:9000 -p 9001:9001 -v $(pwd)/data:/data -v $(pwd)/logs:/logs rustfs/rustfs:1.0.0-alpha.76
-```
-
-If you use [podman](https://github.com/containers/podman) instead of docker, you can install the RustFS with the below command
-
-```bash
- podman run -d -p 9000:9000 -p 9001:9001 -v $(pwd)/data:/data -v $(pwd)/logs:/logs rustfs/rustfs:latest
-```
-
-You can also use Docker Compose. Using the `docker-compose.yml` file in the root directory:
-
-```bash
-docker compose --profile observability up -d
-```
-
-Similarly, you can run the command with podman
-
-```bash
-podman compose --profile observability up -d
-```
-
-**NOTE**: We recommend reviewing the `docker-compose.yaml` file before running. It defines several services including Grafana, Prometheus, and Jaeger, which are helpful for RustFS observability. If you wish to start Redis or Nginx containers, you can specify the corresponding profiles.
-
-### 3\. Build from Source (Option 3) - Advanced Users
-
-For developers who want to build RustFS Docker images from source with multi-architecture support:
-
-```bash
-# Build multi-architecture images locally
-./docker-buildx.sh --build-arg RELEASE=latest
-
-# Build and push to registry
-./docker-buildx.sh --push
-
-# Build specific version
-./docker-buildx.sh --release v1.0.0 --push
-
-# Build for custom registry
-./docker-buildx.sh --registry your-registry.com --namespace yourname --push
-```
-
-The `docker-buildx.sh` script supports:
-
- **Multi-architecture builds**: `linux/amd64`, `linux/arm64`
- **Automatic version detection**: Uses git tags or commit hashes
- **Registry flexibility**: Supports Docker Hub, GitHub Container Registry, etc.
- **Build optimization**: Includes caching and parallel builds
-
-You can also use Make targets for convenience:
-
-```bash
-make docker-buildx                    # Build locally
-make docker-buildx-push               # Build and push
-make docker-buildx-version VERSION=v1.0.0  # Build specific version
-make help-docker                      # Show all Docker-related commands
-```
-
-> **Heads-up (macOS cross-compilation)**: macOS keeps the default `ulimit -n` at 256, so `cargo zigbuild` or `./build-rustfs.sh --platform ...` may fail with `ProcessFdQuotaExceeded` when targeting Linux. The build script attempts to raise the limit automatically, but if you still see the warning, run `ulimit -n 4096` (or higher) in your shell before building.
-
-### 4\. Build with Helm Chart (Option 4) - Cloud Native
-
-Follow the instructions in the [Helm Chart README](https://charts.rustfs.com/) to install RustFS on a Kubernetes cluster.
-
-### 5\. Nix Flake (Option 5)
-
-If you have [Nix with flakes enabled](https://nixos.wiki/wiki/Flakes#Enable_flakes):
-
-```bash
-# Run directly without installing
-nix run github:rustfs/rustfs
-
-# Build the binary
-nix build github:rustfs/rustfs
-./result/bin/rustfs --help
-
-# Or from a local checkout
-nix build
-nix run
-```
-
---
-
-### Accessing RustFS
-
-1. **Access the Console**: Open your web browser and navigate to `http://localhost:9001` to access the RustFS console.
-    - Default credentials: `rustfsadmin` / `rustfsadmin`
-2. **Create a Bucket**: Use the console to create a new bucket for your objects.
-3. **Upload Objects**: You can upload files directly through the console or use S3-compatible APIs/clients to interact with your RustFS instance.
-
-**NOTE**: To access the RustFS instance via `https`, please refer to the [TLS Configuration Docs](https://docs.rustfs.com/integration/tls-configured.html).
-
-## Documentation
-
-For detailed documentation, including configuration options, API references, and advanced usage, please visit our [Documentation](https://docs.rustfs.com).
-
-## Getting Help
-
-If you have any questions or need assistance:
-
- Check the [FAQ](https://github.com/rustfs/rustfs/discussions/categories/q-a) for common issues and solutions.
- Join our [GitHub Discussions](https://github.com/rustfs/rustfs/discussions) to ask questions and share your experiences.
- Open an issue on our [GitHub Issues](https://github.com/rustfs/rustfs/issues) page for bug reports or feature requests.
-
-## Links
-
- [Documentation](https://docs.rustfs.com) - The manual you should read
- [Changelog](https://github.com/rustfs/rustfs/releases) - What we broke and fixed
- [GitHub Discussions](https://github.com/rustfs/rustfs/discussions) - Where the community lives
-
-## Contact
-
- **Bugs**: [GitHub Issues](https://github.com/rustfs/rustfs/issues)
- **Business**: [hello@rustfs.com](mailto:hello@rustfs.com)
- **Jobs**: [jobs@rustfs.com](mailto:jobs@rustfs.com)
- **General Discussion**: [GitHub Discussions](https://github.com/rustfs/rustfs/discussions)
- **Contributing**: [CONTRIBUTING.md](CONTRIBUTING.md)
-
-## Contributors
-
-RustFS is a community-driven project, and we appreciate all contributions. Check out the [Contributors](https://github.com/rustfs/rustfs/graphs/contributors) page to see the amazing people who have helped make RustFS better.
-
-<a href="https://github.com/rustfs/rustfs/graphs/contributors">
-<img src="https://opencollective.com/rustfs/contributors.svg?width=890&limit=500&button=false" alt="Contributors" />
-</a>
-
-## Star History
-
-[![Star History Chart](https://api.star-history.com/svg?repos=rustfs/rustfs&type=date&legend=top-left)](https://www.star-history.com/#rustfs/rustfs&type=date&legend=top-left)
-
-## License
-
-[Apache 2.0](https://opensource.org/licenses/Apache-2.0)
-
-**RustFS** is a trademark of RustFS, Inc. All other trademarks are the property of their respective owners.
@@ -1,219 +0,0 @@
-[![RustFS](https://github.com/user-attachments/assets/1b5afcd6-a2c3-47ff-8bc3-ce882b0ddca7)](https://rustfs.com.cn)
-
-<p align="center">RustFS 是一个基于 Rust 构建的高性能分布式对象存储系统。</p>
-
-<p align="center">
-  <a href="https://github.com/rustfs/rustfs/actions/workflows/ci.yml"><img alt="CI" src="https://github.com/rustfs/rustfs/actions/workflows/ci.yml/badge.svg" /></a>
-  <a href="https://github.com/rustfs/rustfs/actions/workflows/docker.yml"><img alt="构建并推送 Docker 镜像" src="https://github.com/rustfs/rustfs/actions/workflows/docker.yml/badge.svg" /></a>
-  <img alt="GitHub 提交活跃度" src="https://img.shields.io/github/commit-activity/m/rustfs/rustfs"/>
-  <img alt="Github 最新提交" src="https://img.shields.io/github/last-commit/rustfs/rustfs"/>
-  <a href="https://hellogithub.com/repository/rustfs/rustfs" target="_blank"><img src="https://abroad.hellogithub.com/v1/widgets/recommend.svg?rid=b95bcb72bdc340b68f16fdf6790b7d5b&claim_uid=MsbvjYeLDKAH457&theme=small" alt="Featured｜HelloGitHub" /></a>
-</p>
-
-
-<p align="center">
-<a href="https://trendshift.io/repositories/14181" target="_blank"><img src="https://trendshift.io/api/badge/repositories/14181" alt="rustfs%2Frustfs | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a> 
-<a href="https://runacap.com/ross-index/q4-2025/" target="_blank" rel="noopener"><img style="width: 260px; height: 55px" src="https://runacap.com/wp-content/uploads/2026/01/ROSS_badge_white_Q4_2025.svg" alt="ROSS Index - Fastest Growing Open-Source Startups in Q4 2025 | Runa Capital" height="55" /></a>
-</p>
-
-<p align="center">
-  <a href="https://docs.rustfs.com/installation/">快速开始</a>
-  · <a href="https://docs.rustfs.com/">文档</a>
-  · <a href="https://github.com/rustfs/rustfs/issues">报告 Bug</a>
-  · <a href="https://github.com/rustfs/rustfs/discussions">社区讨论</a>
-</p>
-
-<p align="center">
-  <a href="https://github.com/rustfs/rustfs/blob/main/README.md">English</a> | 简体中文 |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=de">Deutsch</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=es">Español</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=fr">français</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=ja">日本語</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=ko">한국어</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=pt">Portuguese</a> |
-  <a href="https://readme-i18n.com/rustfs/rustfs?lang=ru">Русский</a>
-</p>
-
-RustFS 是一个基于 Rust 构建的高性能分布式对象存储系统。Rust 是全球最受开发者喜爱的编程语言之一，RustFS 完美结合了 MinIO 的简洁性与 Rust 的内存安全及高性能优势。它提供完整的 S3 兼容性，完全开源，并专为数据湖、人工智能（AI）和大数据负载进行了优化。
-
-与其他存储系统不同，RustFS 采用更宽松、商业友好的 Apache 2.0 许可证，避免了 AGPL 协议的限制。以 Rust 为基石，RustFS 为下一代对象存储提供了更快的速度和更安全的分布式特性。
-
-## 特征和功能状态
-
- **高性能**：基于 Rust 构建，确保极致的速度和资源效率。
- **分布式架构**：可扩展且容错的设计，适用于大规模部署。
- **S3 兼容性**：与现有的 S3 兼容应用和工具无缝集成。
- **数据湖支持**：专为高吞吐量的大数据和 AI 工作负载优化。
- **完全开源**：采用 Apache 2.0 许可证，鼓励社区贡献和商业使用。
- **简单易用**：设计简洁，易于部署和管理。
-
-| 功能               | 状态    | 功能                    | 状态      |
-| :----------------- | :------ | :---------------------- | :-------- |
-| **S3 核心功能**    | ✅ 可用 | **Bitrot (防数据腐烂)** | ✅ 可用   |
-| **上传 / 下载**    | ✅ 可用 | **单机模式**            | ✅ 可用   |
-| **版本控制**       | ✅ 可用 | **存储桶复制**          | ✅ 可用   |
-| **日志功能**       | ✅ 可用 | **生命周期管理**        | 🚧 测试中 |
-| **事件通知**       | ✅ 可用 | **分布式模式**          | 🚧 测试中 |
-| **K8s Helm Chart** | ✅ 可用 | **OPA (策略引擎)**      | 🚧 测试中 |
-
-## RustFS vs MinIO 性能对比
-
-**压力测试环境参数：**
-
-| 类型 | 参数     | 备注                                                      |
-| ---- | -------- | --------------------------------------------------------- |
-| CPU  | 2 核     | Intel Xeon (Sapphire Rapids) Platinum 8475B , 2.7/3.2 GHz |
-| 内存 | 4GB      |                                                           |
-| 网络 | 15Gbps   |                                                           |
-| 硬盘 | 40GB x 4 | IOPS 3800 / Drive                                         |
-
-<https://github.com/user-attachments/assets/2e4979b5-260c-4f2c-ac12-c87fd558072a>
-
-### RustFS vs 其他对象存储
-
-| 特性           | RustFS                                                                                                              | 其他对象存储                                                             |
-| :------------- | :------------------------------------------------------------------------------------------------------------------ | :----------------------------------------------------------------------- |
-| **控制台体验** | **功能强大的控制台**<br>提供全面的管理界面。                                                                        | **基础/简陋的控制台**<br>通常功能过于简单或缺失关键特性。                |
-| **语言与安全** | **基于 Rust 开发**<br>天生的内存安全。                                                                              | **基于 Go 或 C 开发**<br>存在内存 GC 停顿或内存泄漏的潜在风险。          |
-| **数据主权**   | **无遥测 / 完全合规**<br>防止未经授权的数据跨境传输。完全符合 GDPR (欧盟/英国)、CCPA (美国) 和 APPI (日本) 等法规。 | **潜在风险**<br>可能存在法律风险和隐蔽的数据遥测（Telemetry）。          |
-| **开源协议**   | **宽松的 Apache 2.0**<br>商业友好，无“毒丸”条款。                                                                   | **受限的 AGPL v3**<br>存在许可证陷阱和知识产权污染的风险。               |
-| **兼容性**     | **100% S3 兼容**<br>适用于任何云提供商和客户端，随处运行。                                                          | **兼容性不一**<br>虽然支持 S3，但可能缺乏对本地云厂商或特定 API 的支持。 |
-| **边缘与 IoT** | **强大的边缘支持**<br>非常适合安全、创新的边缘设备。                                                                | **边缘支持较弱**<br>对于边缘网关来说通常过于沉重。                       |
-| **成本**       | **稳定且免费**<br>免费社区支持，稳定的商业定价。                                                                    | **高昂成本**<br>1PiB 的成本可能高达 250,000 美元。                       |
-| **风险控制**   | **企业级风险规避**<br>清晰的知识产权，商业使用安全无忧。                                                            | **法律风险**<br>知识产权归属模糊及使用限制风险。                         |
-
-## 保持领先
-
-在 GitHub 上为 RustFS 点赞，即可第一时间收到新版本发布通知。
-
-<img src="https://github.com/user-attachments/assets/7ee40bb4-3e46-4eac-b0d0-5fbeb85ff8f3" />
-
-## 快速开始
-
-请按照以下步骤快速上手 RustFS：
-
-### 1. 一键安装脚本 (选项 1)
-
-```bash
-curl -O https://rustfs.com/install_rustfs.sh && bash install_rustfs.sh
-```
-
-### 2\. Docker 快速启动 (选项 2)
-
-RustFS 容器以非 root 用户 `rustfs` (UID `10001`) 运行。如果您使用 Docker 的 `-v` 参数挂载宿主机目录，请务必确保宿主机目录的所有者已更改为 `1000`，否则会遇到权限拒绝错误。
-
-```bash
- # 创建数据和日志目录
- mkdir -p data logs
-
- # 更改这两个目录的所有者
- chown -R 10001:10001 data logs
-
- # 使用最新版本运行
- docker run -d -p 9000:9000 -p 9001:9001 -v $(pwd)/data:/data -v $(pwd)/logs:/logs rustfs/rustfs:latest
-
- # 使用指定版本运行
- docker run -d -p 9000:9000 -p 9001:9001 -v $(pwd)/data:/data -v $(pwd)/logs:/logs rustfs/rustfs:1.0.0.alpha.68
-```
-
-您也可以使用 Docker Compose。使用根目录下的 `docker-compose.yml` 文件：
-
-```bash
-docker compose --profile observability up -d
-```
-
-**注意**: 我们建议您在运行前查看 `docker-compose.yaml` 文件。该文件定义了包括 Grafana、Prometheus 和 Jaeger 在内的多个服务，有助于 RustFS 的可观测性监控。如果您还想启动 Redis 或 Nginx 容器，可以指定相应的 profile。
-
-### 3\. 源码编译 (选项 3) - 进阶用户
-
-适用于希望从源码构建支持多架构 RustFS Docker 镜像的开发者：
-
-```bash
-# 在本地构建多架构镜像
-./docker-buildx.sh --build-arg RELEASE=latest
-
-# 构建并推送到仓库
-./docker-buildx.sh --push
-
-# 构建指定版本
-./docker-buildx.sh --release v1.0.0 --push
-
-# 构建并推送到自定义仓库
-./docker-buildx.sh --registry your-registry.com --namespace yourname --push
-```
-
-`docker-buildx.sh` 脚本支持：
- **多架构构建**: `linux/amd64`, `linux/arm64`
- **自动版本检测**: 使用 git tags 或 commit hash
- **灵活的仓库支持**: 支持 Docker Hub, GitHub Container Registry 等
- **构建优化**: 包含缓存和并行构建
-
-为了方便起见，您也可以使用 Make 命令：
-
-```bash
-make docker-buildx                    # 本地构建
-make docker-buildx-push               # 构建并推送
-make docker-buildx-version VERSION=v1.0.0  # 构建指定版本
-make help-docker                      # 显示所有 Docker 相关命令
-```
-
-> **注意 (macOS 交叉编译)**: macOS 默认的 `ulimit -n` 限制为 256，因此在使用 `cargo zigbuild` 或 `./build-rustfs.sh --platform ...` 交叉编译 Linux 版本时，可能会因 `ProcessFdQuotaExceeded` 失败。构建脚本会尝试自动提高限制，但如果您仍然看到警告，请在构建前在终端运行 `ulimit -n 4096` (或更高)。
-
-### 4\. 使用 Helm Chart 安装 (选项 4) - 云原生环境
-
-请按照 [Helm Chart README](https://charts.rustfs.com) 上的说明在 Kubernetes 集群上安装 RustFS。
-
---
-
-### 访问 RustFS
-
-1. **访问控制台**: 打开浏览器并访问 `http://localhost:9000` 进入 RustFS 控制台。
-   - 默认账号/密码: `rustfsadmin` / `rustfsadmin`
-2. **创建存储桶**: 使用控制台为您的对象创建一个新的存储桶 (Bucket)。
-3. **上传对象**: 您可以直接通过控制台上传文件，或使用 S3 兼容的 API/客户端与您的 RustFS 实例进行交互。
-
-**注意**: 如果您希望通过 `https` 访问 RustFS 实例，请参考 [TLS 配置文档](https://docs.rustfs.com/integration/tls-configured.html)。
-
-## 文档
-
-有关详细文档，包括配置选项、API 参考和高级用法，请访问我们的 [官方文档](https://docs.rustfs.com)。
-
-## 获取帮助
-
-如果您有任何问题或需要帮助：
-
- 查看 [FAQ](https://github.com/rustfs/rustfs/discussions/categories/q-a) 寻找常见问题和解决方案。
- 加入我们的 [GitHub Discussions](https://github.com/rustfs/rustfs/discussions) 提问并分享您的经验。
- 在我们的 [GitHub Issues](https://github.com/rustfs/rustfs/issues) 页面提交 Bug 报告或功能请求。
-
-## 链接
-
- [官方文档](https://docs.rustfs.com) - 必读手册
- [更新日志](https://github.com/rustfs/rustfs/releases) - 版本变更记录
- [社区讨论](https://github.com/rustfs/rustfs/discussions) - 社区交流地
-
-## 联系方式
-
- **Bug 反馈**: [GitHub Issues](https://github.com/rustfs/rustfs/issues)
- **商务合作**: [hello@rustfs.com](mailto:hello@rustfs.com)
- **工作机会**: [jobs@rustfs.com](mailto:jobs@rustfs.com)
- **一般讨论**: [GitHub Discussions](https://github.com/rustfs/rustfs/discussions)
- **贡献指南**: [CONTRIBUTING.md](https://www.google.com/search?q=CONTRIBUTING.md)
-
-## 贡献者
-
-RustFS 是一个社区驱动的项目，我们感谢所有的贡献。请查看 [贡献者](https://github.com/rustfs/rustfs/graphs/contributors) 页面，看看那些让 RustFS 变得更好的了不起的人们。
-
-<a href="https://github.com/rustfs/rustfs/graphs/contributors">
-<img src="https://opencollective.com/rustfs/contributors.svg?width=890&limit=500&button=false" alt="Contributors" />
-</a>
-
-## Star 历史
-
-[![Star History Chart](https://api.star-history.com/svg?repos=rustfs/rustfs&type=date&legend=top-left)](https://www.star-history.com/#rustfs/rustfs&type=date&legend=top-left)
-
-## 许可证
-
-[Apache 2.0](https://opensource.org/licenses/Apache-2.0)
-
-**RustFS** 是 RustFS, Inc. 的商标。所有其他商标均为其各自所有者的财产。
@@ -1,40 +0,0 @@
-# Security Policy
-
-## Security Philosophy
-
-At RustFS, we take security seriously. We believe that **transparency leads to better security**. The more open our code is, the more eyes are on it, and the faster we can identify and resolve potential issues.
-
-We highly value the contributions of the security community and welcome anyone to audit our code. Your efforts help us make RustFS safer for everyone.
-
-## Supported Versions
-
-To help us focus our security efforts, please refer to the table below to see which versions of RustFS are currently supported with security updates.
-
-| Version | Supported          |
-| ------- | ------------------ |
-| Latest  | :white_check_mark: |
-| < 1.0   | :x:                |
-
-## Reporting a Vulnerability
-
-If you discover a security vulnerability in RustFS, we appreciate your help in disclosing it to us responsibly.
-
-**Please do not open a public GitHub issue for security vulnerabilities.** Publicly disclosing a vulnerability can put the entire community at risk before a fix is available.
-
-### How to Report
-
-1. https://github.com/rustfs/rustfs/security/advisories/new
-2. Please email us directly at: **security@rustfs.com**
-
-In your email, please include:
-1.  **Description**: A detailed description of the vulnerability.
-2.  **Steps to Reproduce**: Steps or a script to reproduce the issue.
-3.  **Impact**: The potential impact of the vulnerability.
-
-### Our Response Process
-
-1.  **Acknowledgment**: We will acknowledge your email within 48 hours.
-2.  **Assessment**: We will investigate the issue and determine its severity.
-3.  **Fix & Disclosure**: We will work on a patch. Once the patch is released, we will publicly announce the vulnerability and acknowledge your contribution (unless you prefer to remain anonymous).
-
-Thank you for helping keep RustFS and its users safe!
@@ -1,47 +0,0 @@
-[default]
-# # Ignore specific spell checking patterns
-# extend-ignore-identifiers-re = [
-#     # Ignore common patterns in base64 encoding and hash values
-#     "[A-Za-z0-9+/]{8,}={0,2}",  # base64 encoding
-#     "[A-Fa-f0-9]{8,}",          # hexadecimal hash
-#     "[A-Za-z0-9_-]{20,}",       # long random strings
-# ]
-
-# # Ignore specific regex patterns in content
-# extend-ignore-re = [
-#     # Ignore hash values and encoded strings (base64 patterns)
-#     "(?i)[A-Za-z0-9+/]{8,}={0,2}",
-#     # Ignore long strings in quotes (usually hash or base64)
-#     '"[A-Za-z0-9+/=_-]{8,}"',
-#     # Ignore IV values and similar cryptographic strings
-#     '"[A-Za-z0-9+/=]{12,}"',
-#     # Ignore cryptographic signatures and keys (including partial strings)
-#     "[A-Za-z0-9+/]{6,}[A-Za-z0-9+/=]*",
-#     # Ignore base64-like strings in comments (common in examples)
-#     "//.*[A-Za-z0-9+/]{8,}[A-Za-z0-9+/=]*",
-# ]
-extend-ignore-re = [
-    # Ignore long strings in quotes (usually hash or base64)
-    '"[A-Za-z0-9+/=_-]{32,}"',
-    # Ignore IV values and similar cryptographic strings
-    '"[A-Za-z0-9+/=]{12,}"',
-    # Ignore cryptographic signatures and keys (including partial strings)
-    "[A-Za-z0-9+/]{16,}[A-Za-z0-9+/=]*",
-]
-
-[default.extend-words]
-bui = "bui"
-typ = "typ"
-clen = "clen"
-datas = "datas"
-bre = "bre"
-abd = "abd"
-mak = "mak"
-gae = "gae"
-GAE = "GAE"
-# s3-tests original test names (cannot be changed)
-nonexisted = "nonexisted"
-consts = "consts"
-
-[files]
-extend-exclude = []
@@ -1,610 +0,0 @@
-#!/usr/bin/env bash
-
-# RustFS Binary Build Script
-# This script compiles RustFS binaries for different platforms and architectures
-
-set -e
-
-# Colors for output
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-BLUE='\033[0;34m'
-NC='\033[0m' # No Color
-
-# Auto-detect current platform
-detect_platform() {
-    local arch=$(uname -m)
-    local os=$(uname -s | tr '[:upper:]' '[:lower:]')
-
-    case "$os" in
-        "linux")
-            case "$arch" in
-                "x86_64")
-                    # Default to GNU for better compatibility
-                    echo "x86_64-unknown-linux-gnu"
-                    ;;
-                "aarch64"|"arm64")
-                    echo "aarch64-unknown-linux-gnu"
-                    ;;
-                "armv7l")
-                    echo "armv7-unknown-linux-gnueabihf"
-                    ;;
-                "loongarch64")
-                    echo "loongarch64-unknown-linux-gnu"
-                    ;;
-                *)
-                    echo "unknown-platform"
-                    ;;
-            esac
-            ;;
-        "darwin")
-            case "$arch" in
-                "x86_64")
-                    echo "x86_64-apple-darwin"
-                    ;;
-                "arm64"|"aarch64")
-                    echo "aarch64-apple-darwin"
-                    ;;
-                *)
-                    echo "unknown-platform"
-                    ;;
-            esac
-            ;;
-        *)
-            echo "unknown-platform"
-            ;;
-    esac
-}
-
-# Cross-platform SHA256 checksum generation
-generate_sha256() {
-    local file="$1"
-    local output_file="$2"
-    local os=$(uname -s | tr '[:upper:]' '[:lower:]')
-
-    case "$os" in
-        "linux")
-            if command -v sha256sum &> /dev/null; then
-                sha256sum "$file" > "$output_file"
-            elif command -v shasum &> /dev/null; then
-                shasum -a 256 "$file" > "$output_file"
-            else
-                print_message $RED "❌ No SHA256 command found (sha256sum or shasum)"
-                return 1
-            fi
-            ;;
-        "darwin")
-            if command -v shasum &> /dev/null; then
-                shasum -a 256 "$file" > "$output_file"
-            elif command -v sha256sum &> /dev/null; then
-                sha256sum "$file" > "$output_file"
-            else
-                print_message $RED "❌ No SHA256 command found (shasum or sha256sum)"
-                return 1
-            fi
-            ;;
-        *)
-            # Try common commands in order
-            if command -v sha256sum &> /dev/null; then
-                sha256sum "$file" > "$output_file"
-            elif command -v shasum &> /dev/null; then
-                shasum -a 256 "$file" > "$output_file"
-            else
-                print_message $RED "❌ No SHA256 command found"
-                return 1
-            fi
-            ;;
-    esac
-}
-
-# Default values
-OUTPUT_DIR="target/release"
-PLATFORM=$(detect_platform)  # Auto-detect current platform
-BINARY_NAME="rustfs"
-BUILD_TYPE="release"
-SIGN=false
-WITH_CONSOLE=true
-FORCE_CONSOLE_UPDATE=false
-CONSOLE_VERSION="latest"
-SKIP_VERIFICATION=false
-CUSTOM_PLATFORM=""
-
-# Print usage
-usage() {
-    echo "Usage: $0 [OPTIONS]"
-    echo ""
-    echo "Description:"
-    echo "  Build RustFS binary for the current platform. Designed for CI/CD pipelines"
-    echo "  where different runners build platform-specific binaries natively."
-    echo "  Includes automatic verification to ensure the built binary is functional."
-    echo ""
-    echo "Options:"
-    echo "  -o, --output-dir DIR       Output directory (default: target/release)"
-    echo "  -b, --binary-name NAME     Binary name (default: rustfs)"
-    echo "  -p, --platform TARGET      Target platform (default: auto-detect)"
-    echo "                              Supported platforms:"
-    echo "                                x86_64-unknown-linux-gnu"
-    echo "                                aarch64-unknown-linux-gnu"
-    echo "                                loongarch64-unknown-linux-gnu"
-    echo "                                armv7-unknown-linux-gnueabihf"
-    echo "                                x86_64-unknown-linux-musl"
-    echo "                                aarch64-unknown-linux-musl"
-    echo "                                armv7-unknown-linux-musleabihf"
-    echo "                                x86_64-apple-darwin"
-    echo "                                aarch64-apple-darwin"
-    echo "                                x86_64-pc-windows-msvc"
-    echo "                                aarch64-pc-windows-msvc"
-    echo "  --dev                      Build in dev mode"
-    echo "  --sign                     Sign binaries after build"
-    echo "  --with-console             Download console static assets (default)"
-    echo "  --no-console               Skip console static assets"
-    echo "  --force-console-update     Force update console assets even if they exist"
-    echo "  --console-version VERSION  Console version to download (default: latest)"
-    echo "  --skip-verification        Skip binary verification after build"
-    echo "  -h, --help                 Show this help message"
-    echo ""
-    echo "Examples:"
-    echo "  $0                         # Build for current platform (includes console assets)"
-    echo "  $0 --dev                   # Development build"
-    echo "  $0 --sign                  # Build and sign binary (release CI)"
-    echo "  $0 --no-console            # Build without console static assets"
-    echo "  $0 --force-console-update  # Force update console assets"
-    echo "  $0 --platform x86_64-unknown-linux-musl  # Build for specific platform"
-    echo "  $0 --skip-verification     # Skip binary verification (for cross-compilation)"
-    echo ""
-    echo "Detected platform: $(detect_platform)"
-    echo "CI Usage: Run this script on each platform's runner to build native binaries"
-}
-
-# Print colored message
-print_message() {
-    local color=$1
-    local message=$2
-    echo -e "${color}${message}${NC}"
-}
-
-# Prevent zig/ld from hitting macOS file descriptor defaults during linking
-ensure_file_descriptor_limit() {
-    local required_limit=4096
-    local current_limit
-    current_limit=$(ulimit -Sn 2>/dev/null || echo "")
-
-    if [ -z "$current_limit" ] || [ "$current_limit" = "unlimited" ]; then
-        return
-    fi
-
-    if (( current_limit >= required_limit )); then
-        return
-    fi
-
-    local hard_limit target_limit
-    hard_limit=$(ulimit -Hn 2>/dev/null || echo "")
-    target_limit=$required_limit
-
-    if [ -n "$hard_limit" ] && [ "$hard_limit" != "unlimited" ] && (( hard_limit < required_limit )); then
-        target_limit=$hard_limit
-    fi
-
-    if ulimit -Sn "$target_limit" 2>/dev/null; then
-        print_message $YELLOW "🔧 Increased open file limit from $current_limit to $target_limit to avoid ProcessFdQuotaExceeded"
-    else
-        print_message $YELLOW "⚠️ Unable to raise ulimit -n automatically (current: $current_limit, needed: $required_limit). Please run 'ulimit -n $required_limit' manually before building."
-    fi
-}
-
-# Get version from git
-get_version() {
-    if git describe --abbrev=0 --tags >/dev/null 2>&1; then
-        git describe --abbrev=0 --tags
-    else
-        git rev-parse --short HEAD
-    fi
-}
-
-# Setup rust environment
-setup_rust_environment() {
-    print_message $BLUE "🔧 Setting up Rust environment..."
-
-    # Install required target for current platform
-    print_message $YELLOW "Installing target: $PLATFORM"
-    rustup target add "$PLATFORM"
-
-    # Set up environment variables for musl targets
-    if [[ "$PLATFORM" == *"musl"* ]]; then
-        print_message $YELLOW "Setting up environment for musl target..."
-        export RUSTFLAGS="-C target-feature=-crt-static"
-
-        # For cargo-zigbuild, set up additional environment variables
-        if command -v cargo-zigbuild &> /dev/null; then
-            print_message $YELLOW "Configuring cargo-zigbuild for musl target..."
-
-            # Set environment variables for better musl support
-            export CC_x86_64_unknown_linux_musl="zig cc -target x86_64-linux-musl"
-            export CXX_x86_64_unknown_linux_musl="zig c++ -target x86_64-linux-musl"
-            export AR_x86_64_unknown_linux_musl="zig ar"
-            export CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER="zig cc -target x86_64-linux-musl"
-
-            export CC_aarch64_unknown_linux_musl="zig cc -target aarch64-linux-musl"
-            export CXX_aarch64_unknown_linux_musl="zig c++ -target aarch64-linux-musl"
-            export AR_aarch64_unknown_linux_musl="zig ar"
-            export CARGO_TARGET_AARCH64_UNKNOWN_LINUX_MUSL_LINKER="zig cc -target aarch64-linux-musl"
-
-            # Set environment variables for zstd-sys to avoid target parsing issues
-            export ZSTD_SYS_USE_PKG_CONFIG=1
-            export PKG_CONFIG_ALLOW_CROSS=1
-        fi
-    fi
-
-    # Install required tools
-    if [ "$SIGN" = true ]; then
-        if ! command -v minisign &> /dev/null; then
-            print_message $YELLOW "Installing minisign for binary signing..."
-            cargo install minisign
-        fi
-    fi
-}
-
-# Download console static assets
-download_console_assets() {
-    local static_dir="rustfs/static"
-    local console_exists=false
-
-    # Check if console assets already exist
-    if [ -d "$static_dir" ] && [ -f "$static_dir/index.html" ]; then
-        console_exists=true
-        local static_size=$(du -sh "$static_dir" 2>/dev/null | cut -f1 || echo "unknown")
-        print_message $YELLOW "Console static assets already exist ($static_size)"
-    fi
-
-    # Determine if we need to download
-    local should_download=false
-    if [ "$WITH_CONSOLE" = true ]; then
-        if [ "$console_exists" = false ]; then
-            print_message $BLUE "🎨 Console assets not found, downloading..."
-            should_download=true
-        elif [ "$FORCE_CONSOLE_UPDATE" = true ]; then
-            print_message $BLUE "🎨 Force updating console assets..."
-            should_download=true
-        else
-            print_message $GREEN "✅ Console assets already available, skipping download"
-        fi
-    else
-        if [ "$console_exists" = true ]; then
-            print_message $GREEN "✅ Using existing console assets"
-        else
-            print_message $YELLOW "⚠️  Console assets not found. Use --download-console to download them."
-        fi
-    fi
-
-    if [ "$should_download" = true ]; then
-        print_message $BLUE "📥 Downloading console static assets..."
-
-        # Create static directory
-        mkdir -p "$static_dir"
-
-        # Download from GitHub Releases (consistent with Docker build)
-        local download_url
-        if [ "$CONSOLE_VERSION" = "latest" ]; then
-            print_message $YELLOW "Getting latest console release info..."
-            # For now, use dl.rustfs.com as fallback until GitHub Releases includes console assets
-            download_url="https://dl.rustfs.com/artifacts/console/rustfs-console-latest.zip"
-        else
-            download_url="https://dl.rustfs.com/artifacts/console/rustfs-console-${CONSOLE_VERSION}.zip"
-        fi
-
-        print_message $YELLOW "Downloading from: $download_url"
-
-        # Download with retries
-        local temp_file="console-assets-temp.zip"
-        local download_success=false
-
-        for i in {1..3}; do
-            if curl -L "$download_url" -o "$temp_file" --retry 3 --retry-delay 5 --max-time 300; then
-                download_success=true
-                break
-            else
-                print_message $YELLOW "Download attempt $i failed, retrying..."
-                sleep 2
-            fi
-        done
-
-        if [ "$download_success" = true ]; then
-            # Verify the downloaded file
-            if [ -f "$temp_file" ] && [ -s "$temp_file" ]; then
-                print_message $BLUE "📦 Extracting console assets..."
-
-                # Extract to static directory
-                if unzip -o "$temp_file" -d "$static_dir"; then
-                    rm "$temp_file"
-                    local final_size=$(du -sh "$static_dir" 2>/dev/null | cut -f1 || echo "unknown")
-                    print_message $GREEN "✅ Console assets downloaded successfully ($final_size)"
-                else
-                    print_message $RED "❌ Failed to extract console assets"
-                    rm -f "$temp_file"
-                    return 1
-                fi
-            else
-                print_message $RED "❌ Downloaded file is empty or invalid"
-                rm -f "$temp_file"
-                return 1
-            fi
-        else
-            print_message $RED "❌ Failed to download console assets after 3 attempts"
-            print_message $YELLOW "💡 Console assets are optional. Build will continue without them."
-            rm -f "$temp_file"
-        fi
-    fi
-}
-
-# Verify binary functionality
-verify_binary() {
-    local binary_path="$1"
-
-    # Check if binary exists
-    if [ ! -f "$binary_path" ]; then
-        print_message $RED "❌ Binary file not found: $binary_path"
-        return 1
-    fi
-
-    # Check if binary is executable
-    if [ ! -x "$binary_path" ]; then
-        print_message $RED "❌ Binary is not executable: $binary_path"
-        return 1
-    fi
-
-    # Check basic functionality - try to run help command
-    print_message $YELLOW "   Testing --help command..."
-    if ! "$binary_path" --help >/dev/null 2>&1; then
-        print_message $RED "❌ Binary failed to run --help command"
-        return 1
-    fi
-
-    # Check version command
-    print_message $YELLOW "   Testing --version command..."
-    if ! "$binary_path" --version >/dev/null 2>&1; then
-        print_message $YELLOW "⚠️  Binary does not support --version command (this is optional)"
-    fi
-
-    # Try to get some basic info about the binary
-    local file_info=$(file "$binary_path" 2>/dev/null || echo "unknown")
-    print_message $YELLOW "   Binary info: $file_info"
-
-    # Check if it's a valid ELF/Mach-O binary
-    if command -v readelf >/dev/null 2>&1; then
-        if readelf -h "$binary_path" >/dev/null 2>&1; then
-            print_message $YELLOW "   ELF binary structure: valid"
-        fi
-    elif command -v otool >/dev/null 2>&1; then
-        if otool -h "$binary_path" >/dev/null 2>&1; then
-            print_message $YELLOW "   Mach-O binary structure: valid"
-        fi
-    fi
-
-    return 0
-}
-
-# Build binary for current platform
-build_binary() {
-    local version=$(get_version)
-    local output_file="${OUTPUT_DIR}/${PLATFORM}/${BINARY_NAME}"
-
-    print_message $BLUE "🏗️  Building for platform: $PLATFORM"
-    print_message $YELLOW "   Version: $version"
-    print_message $YELLOW "   Output: $output_file"
-
-    # Create output directory
-    mkdir -p "${OUTPUT_DIR}/${PLATFORM}"
-
-    # Simple build logic matching the working version (4fb4b353)
-    # Force rebuild by touching build.rs
-    touch rustfs/build.rs
-
-    # Determine build command based on platform and cross-compilation needs
-    local build_cmd=""
-    local current_platform=$(detect_platform)
-
-    print_message $BLUE "📦 Using working version build logic..."
-
-    # Check if we need cross-compilation
-    if [ "$PLATFORM" != "$current_platform" ]; then
-        # Cross-compilation needed
-        if [[ "$PLATFORM" == *"apple-darwin"* ]]; then
-            print_message $RED "❌ macOS cross-compilation not supported"
-            print_message $YELLOW "💡 macOS targets must be built natively on macOS runners"
-            return 1
-        elif [[ "$PLATFORM" == *"windows"* ]]; then
-            # Use cross for Windows ARM64
-            if ! command -v cross &> /dev/null; then
-                print_message $YELLOW "📦 Installing cross tool..."
-                cargo install cross --git https://github.com/cross-rs/cross
-            fi
-            build_cmd="cross build"
-        else
-            # Use zigbuild for Linux ARM64 (matches working version)
-            if ! command -v cargo-zigbuild &> /dev/null; then
-                print_message $RED "❌ cargo-zigbuild not found. Please install it first."
-                return 1
-            fi
-            build_cmd="cargo zigbuild"
-        fi
-    else
-        # Native compilation
-        build_cmd="RUSTFLAGS=-Clink-arg=-lm cargo build"
-    fi
-
-    if [ "$BUILD_TYPE" = "release" ]; then
-        build_cmd+=" --release"
-    fi
-
-    build_cmd+=" --target $PLATFORM"
-    build_cmd+=" -p rustfs --bins"
-
-    print_message $BLUE "📦 Executing: $build_cmd"
-
-    # Execute build (this matches exactly what the working version does)
-    if eval $build_cmd; then
-        print_message $GREEN "✅ Successfully built for $PLATFORM"
-
-        # Copy binary to output directory
-        cp "target/${PLATFORM}/${BUILD_TYPE}/${BINARY_NAME}" "$output_file"
-
-        # Generate checksums
-        print_message $BLUE "🔐 Generating checksums..."
-        (cd "${OUTPUT_DIR}/${PLATFORM}" && generate_sha256 "${BINARY_NAME}" "${BINARY_NAME}.sha256sum")
-
-        # Verify binary functionality (if not skipped)
-        if [ "$SKIP_VERIFICATION" = false ]; then
-            print_message $BLUE "🔍 Verifying binary functionality..."
-            if verify_binary "$output_file"; then
-                print_message $GREEN "✅ Binary verification passed"
-            else
-                print_message $RED "❌ Binary verification failed"
-                return 1
-            fi
-        else
-            print_message $YELLOW "⚠️  Binary verification skipped by user request"
-        fi
-
-        # Sign binary if requested
-        if [ "$SIGN" = true ]; then
-            print_message $BLUE "✍️  Signing binary..."
-            (cd "${OUTPUT_DIR}/${PLATFORM}" && minisign -S -m "${BINARY_NAME}" -s ~/.minisign/minisign.key)
-        fi
-
-        print_message $GREEN "✅ Build completed successfully"
-    else
-        print_message $RED "❌ Failed to build for $PLATFORM"
-        return 1
-    fi
-}
-
-
-
-# Main build function
-build_rustfs() {
-    local version=$(get_version)
-
-    print_message $BLUE "🚀 Starting RustFS binary build process..."
-    print_message $YELLOW "   Version: $version"
-    print_message $YELLOW "   Platform: $PLATFORM"
-    print_message $YELLOW "   Output Directory: $OUTPUT_DIR"
-    print_message $YELLOW "   Build Type: $BUILD_TYPE"
-    print_message $YELLOW "   Sign: $SIGN"
-    print_message $YELLOW "   With Console: $WITH_CONSOLE"
-    if [ "$WITH_CONSOLE" = true ]; then
-        print_message $YELLOW "   Console Version: $CONSOLE_VERSION"
-        print_message $YELLOW "   Force Console Update: $FORCE_CONSOLE_UPDATE"
-    fi
-    print_message $YELLOW "   Skip Verification: $SKIP_VERIFICATION"
-    echo ""
-
-    # Setup environment
-    setup_rust_environment
-    echo ""
-
-    # Download console assets if requested
-    download_console_assets
-    echo ""
-
-    # Build binary
-    build_binary
-    echo ""
-
-    print_message $GREEN "🎉 Build process completed successfully!"
-
-    # Show built binary
-    local binary_file="${OUTPUT_DIR}/${PLATFORM}/${BINARY_NAME}"
-    if [ -f "$binary_file" ]; then
-        local size=$(ls -lh "$binary_file" | awk '{print $5}')
-        print_message $BLUE "📋 Built binary: $binary_file ($size)"
-    fi
-}
-
-# Parse command line arguments
-while [[ $# -gt 0 ]]; do
-    case $1 in
-        -o|--output-dir)
-            OUTPUT_DIR="$2"
-            shift 2
-            ;;
-        -b|--binary-name)
-            BINARY_NAME="$2"
-            shift 2
-            ;;
-        -p|--platform)
-            CUSTOM_PLATFORM="$2"
-            shift 2
-            ;;
-        --dev)
-            BUILD_TYPE="debug"
-            shift
-            ;;
-        --sign)
-            SIGN=true
-            shift
-            ;;
-        --with-console)
-            WITH_CONSOLE=true
-            shift
-            ;;
-        --no-console)
-            WITH_CONSOLE=false
-            shift
-            ;;
-        --force-console-update)
-            FORCE_CONSOLE_UPDATE=true
-            WITH_CONSOLE=true  # Auto-enable download when forcing update
-            shift
-            ;;
-        --console-version)
-            CONSOLE_VERSION="$2"
-            shift 2
-            ;;
-        --skip-verification)
-            SKIP_VERIFICATION=true
-            shift
-            ;;
-        -h|--help)
-            usage
-            exit 0
-            ;;
-        *)
-            print_message $RED "❌ Unknown option: $1"
-            usage
-            exit 1
-            ;;
-    esac
-done
-
-# Main execution
-main() {
-    print_message $BLUE "🦀 RustFS Binary Build Script"
-    echo ""
-
-    # Check if we're in a Rust project
-    if [ ! -f "Cargo.toml" ]; then
-        print_message $RED "❌ No Cargo.toml found. Are you in a Rust project directory?"
-        exit 1
-    fi
-
-    # Override platform if specified
-    if [ -n "$CUSTOM_PLATFORM" ]; then
-        PLATFORM="$CUSTOM_PLATFORM"
-        print_message $YELLOW "🎯 Using specified platform: $PLATFORM"
-
-        # Auto-enable skip verification for cross-compilation
-        if [ "$PLATFORM" != "$(detect_platform)" ]; then
-            SKIP_VERIFICATION=true
-            print_message $YELLOW "⚠️  Cross-compilation detected, enabling --skip-verification"
-        fi
-    fi
-
-    ensure_file_descriptor_limit
-
-    # Start build process
-    build_rustfs
-}
-
-# Run main function
-main
@@ -1,35 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-[package]
-name = "rustfs-appauth"
-edition.workspace = true
-license.workspace = true
-repository.workspace = true
-rust-version.workspace = true
-version.workspace = true
-homepage.workspace = true
-description = "Application authentication and authorization for RustFS, providing secure access control and user management."
-keywords = ["authentication", "authorization", "security", "rustfs", "Minio"]
-categories = ["web-programming", "development-tools", "authentication"]
-
-[dependencies]
-base64-simd = { workspace = true }
-rsa = { workspace = true }
-serde.workspace = true
-serde_json.workspace = true
-rand.workspace = true
-
-[lints]
-workspace = true
@@ -1,37 +0,0 @@
-[![RustFS](https://rustfs.com/images/rustfs-github.png)](https://rustfs.com)
-
-# RustFS AppAuth - Application Authentication
-
-<p align="center">
-  <strong>Application-level authentication and authorization module for RustFS distributed object storage</strong>
-</p>
-
-<p align="center">
-  <a href="https://github.com/rustfs/rustfs/actions/workflows/ci.yml"><img alt="CI" src="https://github.com/rustfs/rustfs/actions/workflows/ci.yml/badge.svg" /></a>
-  <a href="https://docs.rustfs.com/">📖 Documentation</a>
-  · <a href="https://github.com/rustfs/rustfs/issues">🐛 Bug Reports</a>
-  · <a href="https://github.com/rustfs/rustfs/discussions">💬 Discussions</a>
-</p>
-
---
-
-## 📖 Overview
-
-**RustFS AppAuth** provides application-level authentication and authorization capabilities for the [RustFS](https://rustfs.com) distributed object storage system. For the complete RustFS experience, please visit the [main RustFS repository](https://github.com/rustfs/rustfs).
-
-## ✨ Features
-
- JWT-based authentication with secure token management
- RBAC (Role-Based Access Control) for fine-grained permissions
- Multi-tenant application isolation and management
- OAuth 2.0 and OpenID Connect integration
- API key management and rotation
- Session management with configurable expiration
-
-## 📚 Documentation
-
-For comprehensive documentation, examples, and usage guides, please visit the main [RustFS repository](https://github.com/rustfs/rustfs).
-
-## 📄 License
-
-This project is licensed under the Apache License 2.0 - see the [LICENSE](../../LICENSE) file for details.
@@ -1,15 +0,0 @@
-// Copyright 2024 RustFS Team
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-pub mod token;
@@ -1,128 +0,0 @@
-// Copyright 2024 RustFS Team
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-use rsa::{
-    Pkcs1v15Encrypt, RsaPrivateKey, RsaPublicKey,
-    pkcs8::{DecodePrivateKey, DecodePublicKey},
-};
-use serde::{Deserialize, Serialize};
-use std::io::{Error, Result};
-
-#[derive(Serialize, Deserialize, Debug, Default, Clone)]
-pub struct Token {
-    pub name: String, // Application ID
-    pub expired: u64, // Expiry time (UNIX timestamp)
-}
-
-/// Public key generation Token
-/// [token] Token object
-/// [key] Public key string
-/// Returns the encrypted string processed by base64
-pub fn gencode(token: &Token, key: &str) -> Result<String> {
-    let data = serde_json::to_vec(token)?;
-    let mut rng = rand::rng();
-    let public_key = RsaPublicKey::from_public_key_pem(key).map_err(Error::other)?;
-    let encrypted_data = public_key.encrypt(&mut rng, Pkcs1v15Encrypt, &data).map_err(Error::other)?;
-    Ok(base64_simd::URL_SAFE_NO_PAD.encode_to_string(&encrypted_data))
-}
-
-/// Private key resolution Token
-/// [token] Encrypted string processed by base64
-/// [key] Private key string
-/// Return to the Token object
-pub fn parse(token: &str, key: &str) -> Result<Token> {
-    let encrypted_data = base64_simd::URL_SAFE_NO_PAD
-        .decode_to_vec(token.as_bytes())
-        .map_err(Error::other)?;
-    let private_key = RsaPrivateKey::from_pkcs8_pem(key).map_err(Error::other)?;
-    let decrypted_data = private_key.decrypt(Pkcs1v15Encrypt, &encrypted_data).map_err(Error::other)?;
-    let res: Token = serde_json::from_slice(&decrypted_data)?;
-    Ok(res)
-}
-
-pub fn parse_license(license: &str) -> Result<Token> {
-    parse(license, TEST_PRIVATE_KEY)
-    // match parse(license, TEST_PRIVATE_KEY) {
-    //     Ok(token) => {
-    //         if token.expired > SystemTime::now().duration_since(UNIX_EPOCH)?.as_secs() {
-    //             Ok(token)
-    //         } else {
-    //             Err("Token expired".into())
-    //         }
-    //     }
-    //     Err(e) => Err(e),
-    // }
-}
-
-static TEST_PRIVATE_KEY: &str = "-----BEGIN PRIVATE KEY-----\nMIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCj86SrJIuxSxR6\nBJ/dlJEUIj6NeBRnhLQlCDdovuz61+7kJXVcxaR66w4m8W7SLEUP+IlPtnn6vmiG\n7XMhGNHIr7r1JsEVVLhZmL3tKI66DEZl786ZhG81BWqUlmcooIPS8UEPZNqJXLuz\nVGhxNyVGbj/tV7QC2pSISnKaixc+nrhxvo7w56p5qrm9tik0PjTgfZsUePkoBsSN\npoRkAauS14MAzK6HGB75CzG3dZqXUNWSWVocoWtQbZUwFGXyzU01ammsHQDvc2xu\nK1RQpd1qYH5bOWZ0N0aPFwT0r59HztFXg9sbjsnuhO1A7OiUOkc6iGVuJ0wm/9nA\nwZIBqzgjAgMBAAECggEAPMpeSEbotPhNw2BrllE76ec4omPfzPJbiU+em+wPGoNu\nRJHPDnMKJbl6Kd5jZPKdOOrCnxfd6qcnQsBQa/kz7+GYxMV12l7ra+1Cnujm4v0i\nLTHZvPpp8ZLsjeOmpF3AAzsJEJgon74OqtOlVjVIUPEYKvzV9ijt4gsYq0zfdYv0\nhrTMzyrGM4/UvKLsFIBROAfCeWfA7sXLGH8JhrRAyDrtCPzGtyyAmzoHKHtHafcB\nuyPFw/IP8otAgpDk5iiQPNkH0WwzAQIm12oHuNUa66NwUK4WEjXTnDg8KeWLHHNv\nIfN8vdbZchMUpMIvvkr7is315d8f2cHCB5gEO+GWAQKBgQDR/0xNll+FYaiUKCPZ\nvkOCAd3l5mRhsqnjPQ/6Ul1lAyYWpoJSFMrGGn/WKTa/FVFJRTGbBjwP+Mx10bfb\ngUg2GILDTISUh54fp4zngvTi9w4MWGKXrb7I1jPkM3vbJfC/v2fraQ/r7qHPpO2L\nf6ZbGxasIlSvr37KeGoelwcAQQKBgQDH3hmOTS2Hl6D4EXdq5meHKrfeoicGN7m8\noQK7u8iwn1R9zK5nh6IXxBhKYNXNwdCQtBZVRvFjjZ56SZJb7lKqa1BcTsgJfZCy\nnI3Uu4UykrECAH8AVCVqBXUDJmeA2yE+gDAtYEjvhSDHpUfWxoGHr0B/Oqk2Lxc/\npRy1qV5fYwKBgBWSL/hYVf+RhIuTg/s9/BlCr9SJ0g3nGGRrRVTlWQqjRCpXeFOO\nJzYqSq9pFGKUggEQxoOyJEFPwVDo9gXqRcyov+Xn2kaXl7qQr3yoixc1YZALFDWY\nd1ySBEqQr0xXnV9U/gvEgwotPRnjSzNlLWV2ZuHPtPtG/7M0o1H5GZMBAoGAKr3N\nW0gX53o+my4pCnxRQW+aOIsWq1a5aqRIEFudFGBOUkS2Oz+fI1P1GdrRfhnnfzpz\n2DK+plp/vIkFOpGhrf4bBlJ2psjqa7fdANRFLMaAAfyXLDvScHTQTCcnVUAHQPVq\n2BlSH56pnugyj7SNuLV6pnql+wdhAmRN2m9o1h8CgYAbX2juSr4ioXwnYjOUdrIY\n4+ERvHcXdjoJmmPcAm4y5NbSqLXyU0FQmplNMt2A5LlniWVJ9KNdjAQUt60FZw/+\nr76LdxXaHNZghyx0BOs7mtq5unSQXamZ8KixasfhE9uz3ij1jXjG6hafWkS8/68I\nuWbaZqgvy7a9oPHYlKH7Jg==\n-----END PRIVATE KEY-----\n";
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use rsa::{
-        RsaPrivateKey,
-        pkcs8::{EncodePrivateKey, EncodePublicKey, LineEnding},
-    };
-    use std::time::{SystemTime, UNIX_EPOCH};
-
-    #[test]
-    fn test_gencode_and_parse() {
-        let mut rng = rand::rng();
-        let bits = 2048;
-        let private_key = RsaPrivateKey::new(&mut rng, bits).expect("Failed to generate private key");
-        let public_key = RsaPublicKey::from(&private_key);
-
-        let private_key_pem = private_key.to_pkcs8_pem(LineEnding::LF).unwrap();
-        let public_key_pem = public_key.to_public_key_pem(LineEnding::LF).unwrap();
-
-        let token = Token {
-            name: "test_app".to_string(),
-            expired: SystemTime::now().duration_since(UNIX_EPOCH).unwrap().as_secs() + 3600, // 1 hour from now
-        };
-
-        let encoded = gencode(&token, &public_key_pem).expect("Failed to encode token");
-
-        let decoded = parse(&encoded, &private_key_pem).expect("Failed to decode token");
-
-        assert_eq!(token.name, decoded.name);
-        assert_eq!(token.expired, decoded.expired);
-    }
-
-    #[test]
-    fn test_parse_invalid_token() {
-        let mut rng = rand::rng();
-        let private_key_pem = RsaPrivateKey::new(&mut rng, 2048)
-            .expect("Failed to generate private key")
-            .to_pkcs8_pem(LineEnding::LF)
-            .unwrap();
-
-        let invalid_token = "invalid_base64_token";
-        let result = parse(invalid_token, &private_key_pem);
-
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_gencode_with_invalid_key() {
-        let token = Token {
-            name: "test_app".to_string(),
-            expired: SystemTime::now().duration_since(UNIX_EPOCH).unwrap().as_secs() + 3600, // 1 hour from now
-        };
-
-        let invalid_key = "invalid_public_key";
-        let result = gencode(&token, invalid_key);
-
-        assert!(result.is_err());
-    }
-}
@@ -1,48 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-[package]
-name = "rustfs-audit"
-edition.workspace = true
-license.workspace = true
-repository.workspace = true
-rust-version.workspace = true
-version.workspace = true
-homepage.workspace = true
-description = "Audit target management system for RustFS, providing multi-target fan-out and hot reload capabilities."
-documentation = "https://docs.rs/rustfs-audit/latest/rustfs_audit/"
-keywords = ["audit", "target", "management", "fan-out", "RustFS"]
-categories = ["web-programming", "development-tools", "asynchronous", "api-bindings"]
-
-[dependencies]
-rustfs-targets = { workspace = true }
-rustfs-config = { workspace = true, features = ["audit", "constants"] }
-rustfs-ecstore = { workspace = true }
-async-trait = { workspace = true }
-chrono = { workspace = true }
-const-str = { workspace = true }
-futures = { workspace = true }
-hashbrown = { workspace = true }
-metrics = { workspace = true }
-serde = { workspace = true }
-serde_json = { workspace = true }
-thiserror = { workspace = true }
-tokio = { workspace = true, features = ["sync", "fs", "rt-multi-thread", "rt", "time", "macros"] }
-tracing = { workspace = true, features = ["std", "attributes"] }
-url = { workspace = true }
-rumqttc = { workspace = true }
-
-
-[lints]
-workspace = true
@@ -1,124 +0,0 @@
-# rustfs-audit
-
-**Audit Target Management System for RustFS**
-
-`rustfs-audit` is a comprehensive audit logging system designed for RustFS. It provides multi-target fan-out, hot reload
-capabilities, and rich observability features for distributed storage and event-driven systems.
-
-## Features
-
- **Multi-Target Fan-Out:** Dispatch audit logs to multiple targets (e.g., Webhook, MQTT) concurrently.
- **Hot Reload:** Dynamically reload configuration and update targets without downtime.
- **Observability:** Collect metrics such as EPS (Events Per Second), average latency, error rate, and target success
-  rate.
- **Performance Validation:** Validate system performance against requirements and receive optimization recommendations.
- **Extensible Registry:** Manage audit targets with add, remove, enable, disable, and upsert operations.
- **Global Singleton:** Easy-to-use global audit system and logger.
- **Async & Thread-Safe:** Built on Tokio and Rust async primitives for high concurrency.
-
-## Getting Started
-
-### Add Dependency
-
-Add to your `Cargo.toml`:
-
-```toml
-[dependencies]
-rustfs-audit = "0.1"
-```
-
-### Basic Usage
-
-#### Initialize and Start Audit System
-
-```rust
-use rustfs_audit::{start_audit_system, AuditLogger};
-use rustfs_ecstore::config::Config;
-
-#[tokio::main]
-async fn main() {
-    let config = Config::load("path/to/config.toml").await.unwrap();
-    start_audit_system(config).await.unwrap();
-}
-```
-
-#### Log an Audit Entry
-
-```rust
-use rustfs_audit::{AuditEntry, AuditLogger, ApiDetails};
-use chrono::Utc;
-use rustfs_targets::EventName;
-
-let entry = AuditEntry::new(
-"v1".to_string(),
-Some("deployment-123".to_string()),
-Some("siteA".to_string()),
-Utc::now(),
-EventName::ObjectCreatedPut,
-Some("type".to_string()),
-"trigger".to_string(),
-ApiDetails::default (),
-);
-
-AuditLogger::log(entry).await;
-```
-
-#### Observability & Metrics
-
-```rust
-use rustfs_audit::{get_metrics_report, validate_performance};
-
-let report = get_metrics_report().await;
-println!("{}", report.format());
-
-let validation = validate_performance().await;
-println!("{}", validation.format());
-```
-
-## Configuration
-
-Targets are configured via TOML files and environment variables. Supported target types:
-
- **Webhook**
- **MQTT**
-
-Environment variables override file configuration.
-See [docs.rs/rustfs-audit](https://docs.rs/rustfs-audit/latest/rustfs_audit/) for details.
-
-## API Overview
-
- `AuditSystem`: Main system for managing targets and dispatching logs.
- `AuditRegistry`: Registry for audit targets.
- `AuditEntry`: Audit log entry structure.
- `ApiDetails`: API call details for audit logs.
- `AuditLogger`: Global logger singleton.
- `AuditMetrics`, `AuditMetricsReport`: Metrics and reporting.
- `PerformanceValidation`: Performance validation and recommendations.
-
-## Observability
-
- **Metrics:** EPS, average latency, error rate, target success rate, processed/failed events, config reloads, system
-  starts.
- **Validation:** Checks if EPS ≥ 3000, latency ≤ 30ms, error rate ≤ 1%. Provides actionable recommendations.
-
-## Contributing
-
-Issues and PRs are welcome!  
-See [docs.rs/rustfs-audit](https://docs.rs/rustfs-audit/latest/rustfs_audit/) for detailed developer documentation.
-
-## License
-
-Apache License 2.0
-
-## Documentation
-
-For detailed API documentation, refer to source code comments
-and [docs.rs documentation](https://docs.rs/rustfs-audit/latest/rustfs_audit/).
-
---
-
-**Note:**  
-This crate is designed for use within the RustFS ecosystem and may depend on other RustFS crates such as
-`rustfs-targets`, `rustfs-config`, and `rustfs-ecstore`.  
-For integration examples and advanced usage, see the [docs.rs](https://docs.rs/rustfs-audit/latest/rustfs_audit/)
-documentation.
@@ -1,317 +0,0 @@
-// Copyright 2024 RustFS Team
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-use chrono::{DateTime, Utc};
-use hashbrown::HashMap;
-use rustfs_targets::EventName;
-use serde::{Deserialize, Serialize};
-use serde_json::Value;
-
-/// ObjectVersion represents an object version with key and versionId
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, Default)]
-pub struct ObjectVersion {
-    #[serde(rename = "objectName")]
-    pub object_name: String,
-    #[serde(rename = "versionId", skip_serializing_if = "Option::is_none")]
-    pub version_id: Option<String>,
-}
-
-impl ObjectVersion {
-    pub fn new(object_name: String, version_id: Option<String>) -> Self {
-        Self { object_name, version_id }
-    }
-}
-
-/// `ApiDetails` contains API information for the audit entry.
-#[derive(Debug, Clone, Serialize, Deserialize, Default)]
-pub struct ApiDetails {
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub name: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub bucket: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub object: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub objects: Option<Vec<ObjectVersion>>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub status: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub status_code: Option<i32>,
-    #[serde(rename = "rx", skip_serializing_if = "Option::is_none")]
-    pub input_bytes: Option<i64>,
-    #[serde(rename = "tx", skip_serializing_if = "Option::is_none")]
-    pub output_bytes: Option<i64>,
-    #[serde(rename = "txHeaders", skip_serializing_if = "Option::is_none")]
-    pub header_bytes: Option<i64>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub time_to_first_byte: Option<String>,
-    #[serde(rename = "timeToFirstByteInNS", skip_serializing_if = "Option::is_none")]
-    pub time_to_first_byte_in_ns: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub time_to_response: Option<String>,
-    #[serde(rename = "timeToResponseInNS", skip_serializing_if = "Option::is_none")]
-    pub time_to_response_in_ns: Option<String>,
-}
-
-/// Builder for `ApiDetails`.
-#[derive(Default, Clone)]
-pub struct ApiDetailsBuilder(pub ApiDetails);
-
-impl ApiDetailsBuilder {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn name(mut self, name: impl Into<String>) -> Self {
-        self.0.name = Some(name.into());
-        self
-    }
-
-    pub fn bucket(mut self, bucket: impl Into<String>) -> Self {
-        self.0.bucket = Some(bucket.into());
-        self
-    }
-
-    pub fn object(mut self, object: impl Into<String>) -> Self {
-        self.0.object = Some(object.into());
-        self
-    }
-
-    pub fn objects(mut self, objects: Vec<ObjectVersion>) -> Self {
-        self.0.objects = Some(objects);
-        self
-    }
-
-    pub fn status(mut self, status: impl Into<String>) -> Self {
-        self.0.status = Some(status.into());
-        self
-    }
-
-    pub fn status_code(mut self, code: i32) -> Self {
-        self.0.status_code = Some(code);
-        self
-    }
-
-    pub fn input_bytes(mut self, bytes: i64) -> Self {
-        self.0.input_bytes = Some(bytes);
-        self
-    }
-
-    pub fn output_bytes(mut self, bytes: i64) -> Self {
-        self.0.output_bytes = Some(bytes);
-        self
-    }
-
-    pub fn header_bytes(mut self, bytes: i64) -> Self {
-        self.0.header_bytes = Some(bytes);
-        self
-    }
-
-    pub fn time_to_first_byte(mut self, t: impl Into<String>) -> Self {
-        self.0.time_to_first_byte = Some(t.into());
-        self
-    }
-
-    pub fn time_to_first_byte_in_ns(mut self, t: impl Into<String>) -> Self {
-        self.0.time_to_first_byte_in_ns = Some(t.into());
-        self
-    }
-
-    pub fn time_to_response(mut self, t: impl Into<String>) -> Self {
-        self.0.time_to_response = Some(t.into());
-        self
-    }
-
-    pub fn time_to_response_in_ns(mut self, t: impl Into<String>) -> Self {
-        self.0.time_to_response_in_ns = Some(t.into());
-        self
-    }
-
-    pub fn build(self) -> ApiDetails {
-        self.0
-    }
-}
-
-/// `AuditEntry` represents an audit log entry.
-#[derive(Debug, Clone, Serialize, Deserialize, Default)]
-pub struct AuditEntry {
-    pub version: String,
-    #[serde(rename = "deploymentid", skip_serializing_if = "Option::is_none")]
-    pub deployment_id: Option<String>,
-    #[serde(rename = "siteName", skip_serializing_if = "Option::is_none")]
-    pub site_name: Option<String>,
-    #[serde(with = "chrono::serde::ts_milliseconds")]
-    pub time: DateTime<Utc>,
-    pub event: EventName,
-    #[serde(rename = "type", skip_serializing_if = "Option::is_none")]
-    pub entry_type: Option<String>,
-    pub trigger: String,
-    pub api: ApiDetails,
-    #[serde(rename = "remotehost", skip_serializing_if = "Option::is_none")]
-    pub remote_host: Option<String>,
-    #[serde(rename = "requestID", skip_serializing_if = "Option::is_none")]
-    pub request_id: Option<String>,
-    #[serde(rename = "userAgent", skip_serializing_if = "Option::is_none")]
-    pub user_agent: Option<String>,
-    #[serde(rename = "requestPath", skip_serializing_if = "Option::is_none")]
-    pub req_path: Option<String>,
-    #[serde(rename = "requestHost", skip_serializing_if = "Option::is_none")]
-    pub req_host: Option<String>,
-    #[serde(rename = "requestNode", skip_serializing_if = "Option::is_none")]
-    pub req_node: Option<String>,
-    #[serde(rename = "requestClaims", skip_serializing_if = "Option::is_none")]
-    pub req_claims: Option<HashMap<String, Value>>,
-    #[serde(rename = "requestQuery", skip_serializing_if = "Option::is_none")]
-    pub req_query: Option<HashMap<String, String>>,
-    #[serde(rename = "requestHeader", skip_serializing_if = "Option::is_none")]
-    pub req_header: Option<HashMap<String, String>>,
-    #[serde(rename = "responseHeader", skip_serializing_if = "Option::is_none")]
-    pub resp_header: Option<HashMap<String, String>>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub tags: Option<HashMap<String, Value>>,
-    #[serde(rename = "accessKey", skip_serializing_if = "Option::is_none")]
-    pub access_key: Option<String>,
-    #[serde(rename = "parentUser", skip_serializing_if = "Option::is_none")]
-    pub parent_user: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub error: Option<String>,
-}
-
-/// Constructor for `AuditEntry`.
-pub struct AuditEntryBuilder(AuditEntry);
-
-impl AuditEntryBuilder {
-    /// Create a new builder with all required fields.
-    pub fn new(version: impl Into<String>, event: EventName, trigger: impl Into<String>, api: ApiDetails) -> Self {
-        Self(AuditEntry {
-            version: version.into(),
-            time: Utc::now(),
-            event,
-            trigger: trigger.into(),
-            api,
-            ..Default::default()
-        })
-    }
-
-    // event
-    pub fn version(mut self, version: impl Into<String>) -> Self {
-        self.0.version = version.into();
-        self
-    }
-
-    pub fn event(mut self, event: EventName) -> Self {
-        self.0.event = event;
-        self
-    }
-
-    pub fn api(mut self, api_details: ApiDetails) -> Self {
-        self.0.api = api_details;
-        self
-    }
-
-    pub fn deployment_id(mut self, id: impl Into<String>) -> Self {
-        self.0.deployment_id = Some(id.into());
-        self
-    }
-
-    pub fn site_name(mut self, name: impl Into<String>) -> Self {
-        self.0.site_name = Some(name.into());
-        self
-    }
-
-    pub fn time(mut self, time: DateTime<Utc>) -> Self {
-        self.0.time = time;
-        self
-    }
-
-    pub fn entry_type(mut self, entry_type: impl Into<String>) -> Self {
-        self.0.entry_type = Some(entry_type.into());
-        self
-    }
-
-    pub fn remote_host(mut self, host: impl Into<String>) -> Self {
-        self.0.remote_host = Some(host.into());
-        self
-    }
-
-    pub fn request_id(mut self, id: impl Into<String>) -> Self {
-        self.0.request_id = Some(id.into());
-        self
-    }
-
-    pub fn user_agent(mut self, agent: impl Into<String>) -> Self {
-        self.0.user_agent = Some(agent.into());
-        self
-    }
-
-    pub fn req_path(mut self, path: impl Into<String>) -> Self {
-        self.0.req_path = Some(path.into());
-        self
-    }
-
-    pub fn req_host(mut self, host: impl Into<String>) -> Self {
-        self.0.req_host = Some(host.into());
-        self
-    }
-
-    pub fn req_node(mut self, node: impl Into<String>) -> Self {
-        self.0.req_node = Some(node.into());
-        self
-    }
-
-    pub fn req_claims(mut self, claims: HashMap<String, Value>) -> Self {
-        self.0.req_claims = Some(claims);
-        self
-    }
-
-    pub fn req_query(mut self, query: HashMap<String, String>) -> Self {
-        self.0.req_query = Some(query);
-        self
-    }
-
-    pub fn req_header(mut self, header: HashMap<String, String>) -> Self {
-        self.0.req_header = Some(header);
-        self
-    }
-
-    pub fn resp_header(mut self, header: HashMap<String, String>) -> Self {
-        self.0.resp_header = Some(header);
-        self
-    }
-
-    pub fn tags(mut self, tags: HashMap<String, Value>) -> Self {
-        self.0.tags = Some(tags);
-        self
-    }
-
-    pub fn access_key(mut self, key: impl Into<String>) -> Self {
-        self.0.access_key = Some(key.into());
-        self
-    }
-
-    pub fn parent_user(mut self, user: impl Into<String>) -> Self {
-        self.0.parent_user = Some(user.into());
-        self
-    }
-
-    pub fn error(mut self, error: impl Into<String>) -> Self {
-        self.0.error = Some(error.into());
-        self
-    }
-
-    /// Construct the final `AuditEntry`.
-    pub fn build(self) -> AuditEntry {
-        self.0
-    }
-}
@@ -1,55 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-use thiserror::Error;
-
-/// Result type for audit operations
-pub type AuditResult<T> = Result<T, AuditError>;
-
-/// Errors that can occur during audit operations
-#[derive(Error, Debug)]
-pub enum AuditError {
-    #[error("Configuration error: {0}")]
-    Configuration(String, #[source] Option<Box<dyn std::error::Error + Send + Sync>>),
-
-    #[error("config not loaded")]
-    ConfigNotLoaded,
-
-    #[error("Target error: {0}")]
-    Target(#[from] rustfs_targets::TargetError),
-
-    #[error("System not initialized: {0}")]
-    NotInitialized(String),
-
-    #[error("System already initialized")]
-    AlreadyInitialized,
-
-    #[error("Storage not available: {0}")]
-    StorageNotAvailable(String),
-
-    #[error("Failed to save configuration: {0}")]
-    SaveConfig(#[source] Box<dyn std::error::Error + Send + Sync>),
-
-    #[error("Failed to load configuration: {0}")]
-    LoadConfig(#[source] Box<dyn std::error::Error + Send + Sync>),
-
-    #[error("Serialization error: {0}")]
-    Serialization(#[from] serde_json::Error),
-
-    #[error("I/O error: {0}")]
-    Io(#[from] std::io::Error),
-
-    #[error("Join error: {0}")]
-    Join(#[from] tokio::task::JoinError),
-}
@@ -1,224 +0,0 @@
-// Copyright 2024 RustFS Team
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-use crate::AuditEntry;
-use async_trait::async_trait;
-use hashbrown::HashSet;
-use rumqttc::QoS;
-use rustfs_config::audit::{AUDIT_MQTT_KEYS, AUDIT_WEBHOOK_KEYS, ENV_AUDIT_MQTT_KEYS, ENV_AUDIT_WEBHOOK_KEYS};
-use rustfs_config::{
-    AUDIT_DEFAULT_DIR, DEFAULT_LIMIT, MQTT_BROKER, MQTT_KEEP_ALIVE_INTERVAL, MQTT_PASSWORD, MQTT_QOS, MQTT_QUEUE_DIR,
-    MQTT_QUEUE_LIMIT, MQTT_RECONNECT_INTERVAL, MQTT_TOPIC, MQTT_USERNAME, WEBHOOK_AUTH_TOKEN, WEBHOOK_CLIENT_CERT,
-    WEBHOOK_CLIENT_KEY, WEBHOOK_ENDPOINT, WEBHOOK_QUEUE_DIR, WEBHOOK_QUEUE_LIMIT,
-};
-use rustfs_ecstore::config::KVS;
-use rustfs_targets::{
-    Target,
-    error::TargetError,
-    target::{mqtt::MQTTArgs, webhook::WebhookArgs},
-};
-use std::time::Duration;
-use tracing::{debug, warn};
-use url::Url;
-
-/// Trait for creating targets from configuration
-#[async_trait]
-pub trait TargetFactory: Send + Sync {
-    /// Creates a target from configuration
-    async fn create_target(&self, id: String, config: &KVS) -> Result<Box<dyn Target<AuditEntry> + Send + Sync>, TargetError>;
-
-    /// Validates target configuration
-    fn validate_config(&self, id: &str, config: &KVS) -> Result<(), TargetError>;
-
-    /// Returns a set of valid configuration field names for this target type.
-    /// This is used to filter environment variables.
-    fn get_valid_fields(&self) -> HashSet<String>;
-
-    /// Returns a set of valid configuration env field names for this target type.
-    /// This is used to filter environment variables.
-    fn get_valid_env_fields(&self) -> HashSet<String>;
-}
-
-/// Factory for creating Webhook targets
-pub struct WebhookTargetFactory;
-
-#[async_trait]
-impl TargetFactory for WebhookTargetFactory {
-    async fn create_target(&self, id: String, config: &KVS) -> Result<Box<dyn Target<AuditEntry> + Send + Sync>, TargetError> {
-        // All config values are now read directly from the merged `config` KVS.
-        let endpoint = config
-            .lookup(WEBHOOK_ENDPOINT)
-            .ok_or_else(|| TargetError::Configuration("Missing webhook endpoint".to_string()))?;
-        let parsed_endpoint = endpoint.trim();
-        let endpoint_url = Url::parse(parsed_endpoint)
-            .map_err(|e| TargetError::Configuration(format!("Invalid endpoint URL: {e} (value: '{parsed_endpoint}')")))?;
-
-        let args = WebhookArgs {
-            enable: true, // If we are here, it's already enabled.
-            endpoint: endpoint_url,
-            auth_token: config.lookup(WEBHOOK_AUTH_TOKEN).unwrap_or_default(),
-            queue_dir: config.lookup(WEBHOOK_QUEUE_DIR).unwrap_or(AUDIT_DEFAULT_DIR.to_string()),
-            queue_limit: config
-                .lookup(WEBHOOK_QUEUE_LIMIT)
-                .and_then(|v| v.parse::<u64>().ok())
-                .unwrap_or(DEFAULT_LIMIT),
-            client_cert: config.lookup(WEBHOOK_CLIENT_CERT).unwrap_or_default(),
-            client_key: config.lookup(WEBHOOK_CLIENT_KEY).unwrap_or_default(),
-            target_type: rustfs_targets::target::TargetType::AuditLog,
-        };
-
-        let target = rustfs_targets::target::webhook::WebhookTarget::new(id, args)?;
-        Ok(Box::new(target))
-    }
-
-    fn validate_config(&self, _id: &str, config: &KVS) -> Result<(), TargetError> {
-        // Validation also uses the merged `config` KVS directly.
-        let endpoint = config
-            .lookup(WEBHOOK_ENDPOINT)
-            .ok_or_else(|| TargetError::Configuration("Missing webhook endpoint".to_string()))?;
-        debug!("endpoint: {}", endpoint);
-        let parsed_endpoint = endpoint.trim();
-        Url::parse(parsed_endpoint)
-            .map_err(|e| TargetError::Configuration(format!("Invalid endpoint URL: {e} (value: '{parsed_endpoint}')")))?;
-
-        let client_cert = config.lookup(WEBHOOK_CLIENT_CERT).unwrap_or_default();
-        let client_key = config.lookup(WEBHOOK_CLIENT_KEY).unwrap_or_default();
-
-        if client_cert.is_empty() != client_key.is_empty() {
-            return Err(TargetError::Configuration(
-                "Both client_cert and client_key must be specified together".to_string(),
-            ));
-        }
-
-        let queue_dir = config.lookup(WEBHOOK_QUEUE_DIR).unwrap_or(AUDIT_DEFAULT_DIR.to_string());
-        if !queue_dir.is_empty() && !std::path::Path::new(&queue_dir).is_absolute() {
-            return Err(TargetError::Configuration("Webhook queue directory must be an absolute path".to_string()));
-        }
-
-        Ok(())
-    }
-
-    fn get_valid_fields(&self) -> HashSet<String> {
-        AUDIT_WEBHOOK_KEYS.iter().map(|s| s.to_string()).collect()
-    }
-
-    fn get_valid_env_fields(&self) -> HashSet<String> {
-        ENV_AUDIT_WEBHOOK_KEYS.iter().map(|s| s.to_string()).collect()
-    }
-}
-
-/// Factory for creating MQTT targets
-pub struct MQTTTargetFactory;
-
-#[async_trait]
-impl TargetFactory for MQTTTargetFactory {
-    async fn create_target(&self, id: String, config: &KVS) -> Result<Box<dyn Target<AuditEntry> + Send + Sync>, TargetError> {
-        let broker = config
-            .lookup(MQTT_BROKER)
-            .ok_or_else(|| TargetError::Configuration("Missing MQTT broker".to_string()))?;
-        let broker_url = Url::parse(&broker)
-            .map_err(|e| TargetError::Configuration(format!("Invalid broker URL: {e} (value: '{broker}')")))?;
-
-        let topic = config
-            .lookup(MQTT_TOPIC)
-            .ok_or_else(|| TargetError::Configuration("Missing MQTT topic".to_string()))?;
-
-        let args = MQTTArgs {
-            enable: true, // Assumed enabled.
-            broker: broker_url,
-            topic,
-            qos: config
-                .lookup(MQTT_QOS)
-                .and_then(|v| v.parse::<u8>().ok())
-                .map(|q| match q {
-                    0 => QoS::AtMostOnce,
-                    1 => QoS::AtLeastOnce,
-                    2 => QoS::ExactlyOnce,
-                    _ => QoS::AtLeastOnce,
-                })
-                .unwrap_or(QoS::AtLeastOnce),
-            username: config.lookup(MQTT_USERNAME).unwrap_or_default(),
-            password: config.lookup(MQTT_PASSWORD).unwrap_or_default(),
-            max_reconnect_interval: config
-                .lookup(MQTT_RECONNECT_INTERVAL)
-                .and_then(|v| v.parse::<u64>().ok())
-                .map(Duration::from_secs)
-                .unwrap_or_else(|| Duration::from_secs(5)),
-            keep_alive: config
-                .lookup(MQTT_KEEP_ALIVE_INTERVAL)
-                .and_then(|v| v.parse::<u64>().ok())
-                .map(Duration::from_secs)
-                .unwrap_or_else(|| Duration::from_secs(30)),
-            queue_dir: config.lookup(MQTT_QUEUE_DIR).unwrap_or(AUDIT_DEFAULT_DIR.to_string()),
-            queue_limit: config
-                .lookup(MQTT_QUEUE_LIMIT)
-                .and_then(|v| v.parse::<u64>().ok())
-                .unwrap_or(DEFAULT_LIMIT),
-            target_type: rustfs_targets::target::TargetType::AuditLog,
-        };
-
-        let target = rustfs_targets::target::mqtt::MQTTTarget::new(id, args)?;
-        Ok(Box::new(target))
-    }
-
-    fn validate_config(&self, _id: &str, config: &KVS) -> Result<(), TargetError> {
-        let broker = config
-            .lookup(MQTT_BROKER)
-            .ok_or_else(|| TargetError::Configuration("Missing MQTT broker".to_string()))?;
-        let url = Url::parse(&broker)
-            .map_err(|e| TargetError::Configuration(format!("Invalid broker URL: {e} (value: '{broker}')")))?;
-
-        match url.scheme() {
-            "tcp" | "ssl" | "ws" | "wss" | "mqtt" | "mqtts" => {}
-            _ => {
-                return Err(TargetError::Configuration("Unsupported broker URL scheme".to_string()));
-            }
-        }
-
-        if config.lookup(MQTT_TOPIC).is_none() {
-            return Err(TargetError::Configuration("Missing MQTT topic".to_string()));
-        }
-
-        if let Some(qos_str) = config.lookup(MQTT_QOS) {
-            let qos = qos_str
-                .parse::<u8>()
-                .map_err(|_| TargetError::Configuration("Invalid QoS value".to_string()))?;
-            if qos > 2 {
-                return Err(TargetError::Configuration("QoS must be 0, 1, or 2".to_string()));
-            }
-        }
-
-        let queue_dir = config.lookup(MQTT_QUEUE_DIR).unwrap_or_default();
-        if !queue_dir.is_empty() {
-            if !std::path::Path::new(&queue_dir).is_absolute() {
-                return Err(TargetError::Configuration("MQTT queue directory must be an absolute path".to_string()));
-            }
-            if let Some(qos_str) = config.lookup(MQTT_QOS)
-                && qos_str == "0"
-            {
-                warn!("Using queue_dir with QoS 0 may result in event loss");
-            }
-        }
-
-        Ok(())
-    }
-
-    fn get_valid_fields(&self) -> HashSet<String> {
-        AUDIT_MQTT_KEYS.iter().map(|s| s.to_string()).collect()
-    }
-
-    fn get_valid_env_fields(&self) -> HashSet<String> {
-        ENV_AUDIT_MQTT_KEYS.iter().map(|s| s.to_string()).collect()
-    }
-}
@@ -1,122 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-use crate::{AuditEntry, AuditResult, AuditSystem};
-use rustfs_ecstore::config::Config;
-use std::sync::{Arc, OnceLock};
-use tracing::{debug, error, trace, warn};
-
-/// Global audit system instance
-static AUDIT_SYSTEM: OnceLock<Arc<AuditSystem>> = OnceLock::new();
-
-/// Initialize the global audit system
-pub fn init_audit_system() -> Arc<AuditSystem> {
-    AUDIT_SYSTEM.get_or_init(|| Arc::new(AuditSystem::new())).clone()
-}
-
-/// Get the global audit system instance
-pub fn audit_system() -> Option<Arc<AuditSystem>> {
-    AUDIT_SYSTEM.get().cloned()
-}
-
-/// A helper macro for executing closures if the global audit system is initialized.
-/// If not initialized, log a warning and return `Ok(())`.
-macro_rules! with_audit_system {
-    ($async_closure:expr) => {
-        if let Some(system) = audit_system() {
-            (async move { $async_closure(system).await }).await
-        } else {
-            warn!("Audit system not initialized, operation skipped.");
-            Ok(())
-        }
-    };
-}
-
-/// Start the global audit system with configuration
-pub async fn start_audit_system(config: Config) -> AuditResult<()> {
-    let system = init_audit_system();
-    system.start(config).await
-}
-
-/// Stop the global audit system
-pub async fn stop_audit_system() -> AuditResult<()> {
-    with_audit_system!(|system: Arc<AuditSystem>| async move { system.close().await })
-}
-
-/// Pause the global audit system
-pub async fn pause_audit_system() -> AuditResult<()> {
-    with_audit_system!(|system: Arc<AuditSystem>| async move { system.pause().await })
-}
-
-/// Resume the global audit system
-pub async fn resume_audit_system() -> AuditResult<()> {
-    with_audit_system!(|system: Arc<AuditSystem>| async move { system.resume().await })
-}
-
-/// Dispatch an audit log entry to all targets
-pub async fn dispatch_audit_log(entry: Arc<AuditEntry>) -> AuditResult<()> {
-    if let Some(system) = audit_system() {
-        if system.is_running().await {
-            system.dispatch(entry).await
-        } else {
-            // The system is initialized but not running (for example, it is suspended). Silently discard log entries based on original logic.
-            // For debugging purposes, it can be useful to add a trace log here.
-            trace!("Audit system is not running, dropping audit entry.");
-            Ok(())
-        }
-    } else {
-        // The system is not initialized at all. This is a more important state.
-        // It might be better to return an error or log a warning.
-        debug!("Audit system not initialized, dropping audit entry.");
-        // If this should be a hard failure, you can return Err(AuditError::NotInitialized("..."))
-        Ok(())
-    }
-}
-
-/// Reload the global audit system configuration
-pub async fn reload_audit_config(config: Config) -> AuditResult<()> {
-    with_audit_system!(|system: Arc<AuditSystem>| async move { system.reload_config(config).await })
-}
-
-/// Check if the global audit system is running
-pub async fn is_audit_system_running() -> bool {
-    if let Some(system) = audit_system() {
-        system.is_running().await
-    } else {
-        false
-    }
-}
-
-/// AuditLogger singleton for easy access
-pub struct AuditLogger;
-
-impl AuditLogger {
-    /// Log an audit entry
-    pub async fn log(entry: AuditEntry) {
-        if let Err(e) = dispatch_audit_log(Arc::new(entry)).await {
-            error!(error = %e, "Failed to dispatch audit log entry");
-        }
-    }
-
-    /// Check if audit logging is enabled
-    pub async fn is_enabled() -> bool {
-        is_audit_system_running().await
-    }
-
-    /// Get singleton instance
-    pub fn instance() -> &'static Self {
-        static INSTANCE: AuditLogger = AuditLogger;
-        &INSTANCE
-    }
-}
@@ -1,34 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-//! RustFS Audit System
-//!
-//! This crate provides a comprehensive audit logging system with multi-target fan-out capabilities,
-//! configuration management, and hot reload functionality. It is modeled after the notify system
-//! but specifically designed for audit logging requirements.
-
-pub mod entity;
-pub mod error;
-pub mod factory;
-pub mod global;
-pub mod observability;
-pub mod registry;
-pub mod system;
-
-pub use entity::{ApiDetails, AuditEntry, ObjectVersion};
-pub use error::{AuditError, AuditResult};
-pub use global::*;
-pub use observability::{AuditMetrics, AuditMetricsReport, PerformanceValidation};
-pub use registry::AuditRegistry;
-pub use system::AuditSystem;
@@ -1,428 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-//! Observability and metrics for the audit system
-//!
-//! This module provides comprehensive observability features including:
-//! - Performance metrics (EPS, latency)
-//! - Target health monitoring  
-//! - Configuration change tracking
-//! - Error rate monitoring
-//! - Queue depth monitoring
-
-use metrics::{counter, describe_counter, describe_gauge, describe_histogram, gauge, histogram};
-use std::sync::atomic::{AtomicU64, Ordering};
-use std::sync::{Arc, OnceLock};
-use std::time::{Duration, Instant};
-use tokio::sync::RwLock;
-use tracing::info;
-
-const RUSTFS_AUDIT_METRICS_NAMESPACE: &str = "rustfs.audit.";
-
-const M_AUDIT_EVENTS_TOTAL: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "events.total");
-const M_AUDIT_EVENTS_FAILED: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "events.failed");
-const M_AUDIT_DISPATCH_NS: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "dispatch.ns");
-const M_AUDIT_EPS: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "eps");
-const M_AUDIT_TARGET_OPS: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "target.ops");
-const M_AUDIT_CONFIG_RELOADS: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "config.reloads");
-const M_AUDIT_SYSTEM_STARTS: &str = const_str::concat!(RUSTFS_AUDIT_METRICS_NAMESPACE, "system.starts");
-
-const L_RESULT: &str = "result";
-const L_STATUS: &str = "status";
-
-const V_SUCCESS: &str = "success";
-const V_FAILURE: &str = "failure";
-
-/// One-time registration of indicator meta information
-/// This function ensures that metric descriptors are registered only once.
-pub fn init_observability_metrics() {
-    static METRICS_DESC_INIT: OnceLock<()> = OnceLock::new();
-    METRICS_DESC_INIT.get_or_init(|| {
-        // Event/Time-consuming
-        describe_counter!(M_AUDIT_EVENTS_TOTAL, "Total audit events (labeled by result).");
-        describe_counter!(M_AUDIT_EVENTS_FAILED, "Total failed audit events.");
-        describe_histogram!(M_AUDIT_DISPATCH_NS, "Dispatch time per event (ns).");
-        describe_gauge!(M_AUDIT_EPS, "Events per second since last reset.");
-
-        // Target operation/system event
-        describe_counter!(M_AUDIT_TARGET_OPS, "Total target operations (labeled by status).");
-        describe_counter!(M_AUDIT_CONFIG_RELOADS, "Total configuration reloads.");
-        describe_counter!(M_AUDIT_SYSTEM_STARTS, "Total system starts.");
-    });
-}
-
-/// Metrics collector for audit system observability
-#[derive(Debug)]
-pub struct AuditMetrics {
-    // Performance metrics
-    total_events_processed: AtomicU64,
-    total_events_failed: AtomicU64,
-    total_dispatch_time_ns: AtomicU64,
-
-    // Target metrics
-    target_success_count: AtomicU64,
-    target_failure_count: AtomicU64,
-
-    // System metrics
-    config_reload_count: AtomicU64,
-    system_start_count: AtomicU64,
-
-    // Performance tracking
-    last_reset_time: Arc<RwLock<Instant>>,
-}
-
-impl Default for AuditMetrics {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-impl AuditMetrics {
-    /// Creates a new metrics collector
-    pub fn new() -> Self {
-        init_observability_metrics();
-        Self {
-            total_events_processed: AtomicU64::new(0),
-            total_events_failed: AtomicU64::new(0),
-            total_dispatch_time_ns: AtomicU64::new(0),
-            target_success_count: AtomicU64::new(0),
-            target_failure_count: AtomicU64::new(0),
-            config_reload_count: AtomicU64::new(0),
-            system_start_count: AtomicU64::new(0),
-            last_reset_time: Arc::new(RwLock::new(Instant::now())),
-        }
-    }
-
-    // Suggestion: Call this auxiliary function in the existing "Successful Event Recording" method body to complete the instrumentation
-    #[inline]
-    fn emit_event_success_metrics(&self, dispatch_time: Duration) {
-        // count + histogram
-        counter!(M_AUDIT_EVENTS_TOTAL, L_RESULT => V_SUCCESS).increment(1);
-        histogram!(M_AUDIT_DISPATCH_NS).record(dispatch_time.as_nanos() as f64);
-    }
-
-    // Suggestion: Call this auxiliary function in the existing "Failure Event Recording" method body to complete the instrumentation
-    #[inline]
-    fn emit_event_failure_metrics(&self, dispatch_time: Duration) {
-        counter!(M_AUDIT_EVENTS_TOTAL, L_RESULT => V_FAILURE).increment(1);
-        counter!(M_AUDIT_EVENTS_FAILED).increment(1);
-        histogram!(M_AUDIT_DISPATCH_NS).record(dispatch_time.as_nanos() as f64);
-    }
-
-    /// Records a successful event dispatch
-    pub fn record_event_success(&self, dispatch_time: Duration) {
-        self.total_events_processed.fetch_add(1, Ordering::Relaxed);
-        self.total_dispatch_time_ns
-            .fetch_add(dispatch_time.as_nanos() as u64, Ordering::Relaxed);
-        self.emit_event_success_metrics(dispatch_time);
-    }
-
-    /// Records a failed event dispatch
-    pub fn record_event_failure(&self, dispatch_time: Duration) {
-        self.total_events_failed.fetch_add(1, Ordering::Relaxed);
-        self.total_dispatch_time_ns
-            .fetch_add(dispatch_time.as_nanos() as u64, Ordering::Relaxed);
-        self.emit_event_failure_metrics(dispatch_time);
-    }
-
-    /// Records a successful target operation
-    pub fn record_target_success(&self) {
-        self.target_success_count.fetch_add(1, Ordering::Relaxed);
-        counter!(M_AUDIT_TARGET_OPS, L_STATUS => V_SUCCESS).increment(1);
-    }
-
-    /// Records a failed target operation
-    pub fn record_target_failure(&self) {
-        self.target_failure_count.fetch_add(1, Ordering::Relaxed);
-        counter!(M_AUDIT_TARGET_OPS, L_STATUS => V_FAILURE).increment(1);
-    }
-
-    /// Records a configuration reload
-    pub fn record_config_reload(&self) {
-        self.config_reload_count.fetch_add(1, Ordering::Relaxed);
-        counter!(M_AUDIT_CONFIG_RELOADS).increment(1);
-        info!("Audit configuration reloaded");
-    }
-
-    /// Records a system start
-    pub fn record_system_start(&self) {
-        self.system_start_count.fetch_add(1, Ordering::Relaxed);
-        counter!(M_AUDIT_SYSTEM_STARTS).increment(1);
-        info!("Audit system started");
-    }
-
-    /// Gets the current events per second (EPS)
-    pub async fn get_events_per_second(&self) -> f64 {
-        let reset_time = *self.last_reset_time.read().await;
-        let elapsed = reset_time.elapsed();
-        let total_events = self.total_events_processed.load(Ordering::Relaxed) + self.total_events_failed.load(Ordering::Relaxed);
-
-        let eps = if elapsed.as_secs_f64() > 0.0 {
-            total_events as f64 / elapsed.as_secs_f64()
-        } else {
-            0.0
-        };
-        // EPS is reported in gauge
-        gauge!(M_AUDIT_EPS).set(eps);
-        eps
-    }
-
-    /// Gets the average dispatch latency in milliseconds
-    pub fn get_average_latency_ms(&self) -> f64 {
-        let total_events = self.total_events_processed.load(Ordering::Relaxed) + self.total_events_failed.load(Ordering::Relaxed);
-        let total_time_ns = self.total_dispatch_time_ns.load(Ordering::Relaxed);
-
-        if total_events > 0 {
-            (total_time_ns as f64 / total_events as f64) / 1_000_000.0 // Convert ns to ms
-        } else {
-            0.0
-        }
-    }
-
-    /// Gets the error rate as a percentage
-    pub fn get_error_rate(&self) -> f64 {
-        let total_events = self.total_events_processed.load(Ordering::Relaxed) + self.total_events_failed.load(Ordering::Relaxed);
-        let failed_events = self.total_events_failed.load(Ordering::Relaxed);
-
-        if total_events > 0 {
-            (failed_events as f64 / total_events as f64) * 100.0
-        } else {
-            0.0
-        }
-    }
-
-    /// Gets target success rate as a percentage
-    pub fn get_target_success_rate(&self) -> f64 {
-        let total_ops = self.target_success_count.load(Ordering::Relaxed) + self.target_failure_count.load(Ordering::Relaxed);
-        let success_ops = self.target_success_count.load(Ordering::Relaxed);
-
-        if total_ops > 0 {
-            (success_ops as f64 / total_ops as f64) * 100.0
-        } else {
-            100.0 // No operations = 100% success rate
-        }
-    }
-
-    /// Resets all metrics and timing
-    pub async fn reset(&self) {
-        self.total_events_processed.store(0, Ordering::Relaxed);
-        self.total_events_failed.store(0, Ordering::Relaxed);
-        self.total_dispatch_time_ns.store(0, Ordering::Relaxed);
-        self.target_success_count.store(0, Ordering::Relaxed);
-        self.target_failure_count.store(0, Ordering::Relaxed);
-        self.config_reload_count.store(0, Ordering::Relaxed);
-        self.system_start_count.store(0, Ordering::Relaxed);
-
-        let mut reset_time = self.last_reset_time.write().await;
-        *reset_time = Instant::now();
-
-        // Reset EPS to zero after reset
-        gauge!(M_AUDIT_EPS).set(0.0);
-        info!("Audit metrics reset");
-    }
-
-    /// Generates a comprehensive metrics report
-    pub async fn generate_report(&self) -> AuditMetricsReport {
-        AuditMetricsReport {
-            events_per_second: self.get_events_per_second().await,
-            average_latency_ms: self.get_average_latency_ms(),
-            error_rate_percent: self.get_error_rate(),
-            target_success_rate_percent: self.get_target_success_rate(),
-            total_events_processed: self.total_events_processed.load(Ordering::Relaxed),
-            total_events_failed: self.total_events_failed.load(Ordering::Relaxed),
-            config_reload_count: self.config_reload_count.load(Ordering::Relaxed),
-            system_start_count: self.system_start_count.load(Ordering::Relaxed),
-        }
-    }
-
-    /// Validates performance requirements
-    pub async fn validate_performance_requirements(&self) -> PerformanceValidation {
-        let eps = self.get_events_per_second().await;
-        let avg_latency_ms = self.get_average_latency_ms();
-        let error_rate = self.get_error_rate();
-
-        let mut validation = PerformanceValidation {
-            meets_eps_requirement: eps >= 3000.0,
-            meets_latency_requirement: avg_latency_ms <= 30.0,
-            meets_error_rate_requirement: error_rate <= 1.0, // Less than 1% error rate
-            current_eps: eps,
-            current_latency_ms: avg_latency_ms,
-            current_error_rate: error_rate,
-            recommendations: Vec::new(),
-        };
-
-        // Generate recommendations
-        if !validation.meets_eps_requirement {
-            validation.recommendations.push(format!(
-                "EPS ({eps:.0}) is below requirement (3000). Consider optimizing target dispatch or adding more target instances."
-            ));
-        }
-
-        if !validation.meets_latency_requirement {
-            validation.recommendations.push(format!(
-                "Average latency ({avg_latency_ms:.2}ms) exceeds requirement (30ms). Consider optimizing target responses or increasing timeout values."
-            ));
-        }
-
-        if !validation.meets_error_rate_requirement {
-            validation.recommendations.push(format!(
-                "Error rate ({error_rate:.2}%) exceeds recommendation (1%). Check target connectivity and configuration."
-            ));
-        }
-
-        if validation.meets_eps_requirement && validation.meets_latency_requirement && validation.meets_error_rate_requirement {
-            validation
-                .recommendations
-                .push("All performance requirements are met.".to_string());
-        }
-
-        validation
-    }
-}
-
-/// Comprehensive metrics report
-#[derive(Debug, Clone)]
-pub struct AuditMetricsReport {
-    pub events_per_second: f64,
-    pub average_latency_ms: f64,
-    pub error_rate_percent: f64,
-    pub target_success_rate_percent: f64,
-    pub total_events_processed: u64,
-    pub total_events_failed: u64,
-    pub config_reload_count: u64,
-    pub system_start_count: u64,
-}
-
-impl AuditMetricsReport {
-    /// Formats the report as a human-readable string
-    pub fn format(&self) -> String {
-        format!(
-            "Audit System Metrics Report:\n\
-             Events per Second: {:.2}\n\
-             Average Latency: {:.2}ms\n\
-             Error Rate: {:.2}%\n\
-             Target Success Rate: {:.2}%\n\
-             Total Events Processed: {}\n\
-             Total Events Failed: {}\n\
-             Configuration Reloads: {}\n\
-             System Starts: {}",
-            self.events_per_second,
-            self.average_latency_ms,
-            self.error_rate_percent,
-            self.target_success_rate_percent,
-            self.total_events_processed,
-            self.total_events_failed,
-            self.config_reload_count,
-            self.system_start_count
-        )
-    }
-}
-
-/// Performance validation results
-#[derive(Debug, Clone)]
-pub struct PerformanceValidation {
-    pub meets_eps_requirement: bool,
-    pub meets_latency_requirement: bool,
-    pub meets_error_rate_requirement: bool,
-    pub current_eps: f64,
-    pub current_latency_ms: f64,
-    pub current_error_rate: f64,
-    pub recommendations: Vec<String>,
-}
-
-impl PerformanceValidation {
-    /// Checks if all performance requirements are met
-    pub fn all_requirements_met(&self) -> bool {
-        self.meets_eps_requirement && self.meets_latency_requirement && self.meets_error_rate_requirement
-    }
-
-    /// Formats the validation as a human-readable string
-    pub fn format(&self) -> String {
-        let status = if self.all_requirements_met() { "✅ PASS" } else { "❌ FAIL" };
-
-        let mut result = format!(
-            "Performance Requirements Validation: {}\n\
-             EPS Requirement (≥3000): {} ({:.2})\n\
-             Latency Requirement (≤30ms): {} ({:.2}ms)\n\
-             Error Rate Requirement (≤1%): {} ({:.2}%)\n\
-             \nRecommendations:",
-            status,
-            if self.meets_eps_requirement { "✅" } else { "❌" },
-            self.current_eps,
-            if self.meets_latency_requirement { "✅" } else { "❌" },
-            self.current_latency_ms,
-            if self.meets_error_rate_requirement { "✅" } else { "❌" },
-            self.current_error_rate
-        );
-
-        for rec in &self.recommendations {
-            result.push_str(&format!("\n• {rec}"));
-        }
-
-        result
-    }
-}
-
-/// Global metrics instance
-static GLOBAL_METRICS: OnceLock<Arc<AuditMetrics>> = OnceLock::new();
-
-/// Get or initialize the global metrics instance
-pub fn global_metrics() -> Arc<AuditMetrics> {
-    GLOBAL_METRICS.get_or_init(|| Arc::new(AuditMetrics::new())).clone()
-}
-
-/// Record a successful audit event dispatch
-pub fn record_audit_success(dispatch_time: Duration) {
-    global_metrics().record_event_success(dispatch_time);
-}
-
-/// Record a failed audit event dispatch
-pub fn record_audit_failure(dispatch_time: Duration) {
-    global_metrics().record_event_failure(dispatch_time);
-}
-
-/// Record a successful target operation
-pub fn record_target_success() {
-    global_metrics().record_target_success();
-}
-
-/// Record a failed target operation
-pub fn record_target_failure() {
-    global_metrics().record_target_failure();
-}
-
-/// Record a configuration reload
-pub fn record_config_reload() {
-    global_metrics().record_config_reload();
-}
-
-/// Record a system start
-pub fn record_system_start() {
-    global_metrics().record_system_start();
-}
-
-/// Get the current metrics report
-pub async fn get_metrics_report() -> AuditMetricsReport {
-    global_metrics().generate_report().await
-}
-
-/// Validate performance requirements
-pub async fn validate_performance() -> PerformanceValidation {
-    global_metrics().validate_performance_requirements().await
-}
-
-/// Reset all metrics
-pub async fn reset_metrics() {
-    global_metrics().reset().await;
-}
@@ -1,472 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-use crate::{
-    AuditEntry, AuditError, AuditResult,
-    factory::{MQTTTargetFactory, TargetFactory, WebhookTargetFactory},
-};
-use futures::StreamExt;
-use futures::stream::FuturesUnordered;
-use hashbrown::{HashMap, HashSet};
-use rustfs_config::{DEFAULT_DELIMITER, ENABLE_KEY, ENV_PREFIX, EnableState, audit::AUDIT_ROUTE_PREFIX};
-use rustfs_ecstore::config::{Config, KVS};
-use rustfs_targets::arn::TargetID;
-use rustfs_targets::{Target, TargetError, target::ChannelTargetType};
-use std::str::FromStr;
-use std::sync::Arc;
-use tracing::{debug, error, info, warn};
-
-/// Registry for managing audit targets
-pub struct AuditRegistry {
-    /// Storage for created targets
-    targets: HashMap<String, Box<dyn Target<AuditEntry> + Send + Sync>>,
-    /// Factories for creating targets
-    factories: HashMap<String, Box<dyn TargetFactory>>,
-}
-
-impl Default for AuditRegistry {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-impl AuditRegistry {
-    /// Creates a new AuditRegistry
-    pub fn new() -> Self {
-        let mut registry = AuditRegistry {
-            factories: HashMap::new(),
-            targets: HashMap::new(),
-        };
-
-        // Register built-in factories
-        registry.register(ChannelTargetType::Webhook.as_str(), Box::new(WebhookTargetFactory));
-        registry.register(ChannelTargetType::Mqtt.as_str(), Box::new(MQTTTargetFactory));
-
-        registry
-    }
-
-    /// Registers a new factory for a target type
-    ///
-    /// # Arguments
-    /// * `target_type` - The type of the target (e.g., "webhook", "mqtt").
-    /// * `factory` - The factory instance to create targets of this type.
-    pub fn register(&mut self, target_type: &str, factory: Box<dyn TargetFactory>) {
-        self.factories.insert(target_type.to_string(), factory);
-    }
-
-    /// Creates a target of the specified type with the given ID and configuration
-    ///
-    /// # Arguments
-    /// * `target_type` - The type of the target (e.g., "webhook", "mqtt").
-    /// * `id` - The identifier for the target instance.
-    /// * `config` - The configuration key-value store for the target.
-    ///
-    /// # Returns
-    /// * `Result<Box<dyn Target<AuditEntry> + Send + Sync>, TargetError>` - The created target or an error.
-    pub async fn create_target(
-        &self,
-        target_type: &str,
-        id: String,
-        config: &KVS,
-    ) -> Result<Box<dyn Target<AuditEntry> + Send + Sync>, TargetError> {
-        let factory = self
-            .factories
-            .get(target_type)
-            .ok_or_else(|| TargetError::Configuration(format!("Unknown target type: {target_type}")))?;
-
-        // Validate configuration before creating target
-        factory.validate_config(&id, config)?;
-
-        // Create target
-        factory.create_target(id, config).await
-    }
-
-    /// Creates all targets from a configuration
-    /// Create all notification targets from system configuration and environment variables.
-    /// This method processes the creation of each target concurrently as follows:
-    /// 1. Iterate through all registered target types (e.g. webhooks, mqtt).
-    /// 2. For each type, resolve its configuration in the configuration file and environment variables.
-    /// 3. Identify all target instance IDs that need to be created.
-    /// 4. Combine the default configuration, file configuration, and environment variable configuration for each instance.
-    /// 5. If the instance is enabled, create an asynchronous task for it to instantiate.
-    /// 6. Concurrency executes all creation tasks and collects results.
-    pub async fn create_audit_targets_from_config(
-        &self,
-        config: &Config,
-    ) -> AuditResult<Vec<Box<dyn Target<AuditEntry> + Send + Sync>>> {
-        // Collect only environment variables with the relevant prefix to reduce memory usage
-        let all_env: Vec<(String, String)> = std::env::vars().filter(|(key, _)| key.starts_with(ENV_PREFIX)).collect();
-        // A collection of asynchronous tasks for concurrently executing target creation
-        let mut tasks = FuturesUnordered::new();
-        // let final_config = config.clone(); // Clone a configuration for aggregating the final result
-        // Record the defaults for each segment so that the segment can eventually be rebuilt
-        let mut section_defaults: HashMap<String, KVS> = HashMap::new();
-        // 1. Traverse all registered plants and process them by target type
-        for (target_type, factory) in &self.factories {
-            tracing::Span::current().record("target_type", target_type.as_str());
-            info!("Start working on target types...");
-
-            // 2. Prepare the configuration source
-            // 2.1. Get the configuration segment in the file, e.g. 'audit_webhook'
-            let section_name = format!("{AUDIT_ROUTE_PREFIX}{target_type}").to_lowercase();
-            let file_configs = config.0.get(&section_name).cloned().unwrap_or_default();
-            // 2.2. Get the default configuration for that type
-            let default_cfg = file_configs.get(DEFAULT_DELIMITER).cloned().unwrap_or_default();
-            debug!(?default_cfg, "Get the default configuration");
-
-            // Save defaults for eventual write back
-            section_defaults.insert(section_name.clone(), default_cfg.clone());
-
-            // *** Optimization point 1: Get all legitimate fields of the current target type ***
-            let valid_fields = factory.get_valid_fields();
-            debug!(?valid_fields, "Get the legitimate configuration fields");
-
-            // 3. Resolve instance IDs and configuration overrides from environment variables
-            let mut instance_ids_from_env = HashSet::new();
-            // 3.1. Instance discovery: Based on the '..._ENABLE_INSTANCEID' format
-            let enable_prefix =
-                format!("{ENV_PREFIX}{AUDIT_ROUTE_PREFIX}{target_type}{DEFAULT_DELIMITER}{ENABLE_KEY}{DEFAULT_DELIMITER}")
-                    .to_uppercase();
-            for (key, value) in &all_env {
-                if EnableState::from_str(value).ok().map(|s| s.is_enabled()).unwrap_or(false)
-                    && let Some(id) = key.strip_prefix(&enable_prefix)
-                    && !id.is_empty()
-                {
-                    instance_ids_from_env.insert(id.to_lowercase());
-                }
-            }
-
-            // 3.2. Parse all relevant environment variable configurations
-            // 3.2.1. Build environment variable prefixes such as 'RUSTFS_AUDIT_WEBHOOK_'
-            let env_prefix = format!("{ENV_PREFIX}{AUDIT_ROUTE_PREFIX}{target_type}{DEFAULT_DELIMITER}").to_uppercase();
-            // 3.2.2. 'env_overrides' is used to store configurations parsed from environment variables in the format: {instance id -> {field -> value}}
-            let mut env_overrides: HashMap<String, HashMap<String, String>> = HashMap::new();
-            for (key, value) in &all_env {
-                if let Some(rest) = key.strip_prefix(&env_prefix) {
-                    // Use rsplitn to split from the right side to properly extract the INSTANCE_ID at the end
-                    // Format: <FIELD_NAME>_<INSTANCE_ID> or <FIELD_NAME>
-                    let mut parts = rest.rsplitn(2, DEFAULT_DELIMITER);
-
-                    // The first part from the right is INSTANCE_ID
-                    let instance_id_part = parts.next().unwrap_or(DEFAULT_DELIMITER);
-                    // The remaining part is FIELD_NAME
-                    let field_name_part = parts.next();
-
-                    let (field_name, instance_id) = match field_name_part {
-                        // Case 1: The format is <FIELD_NAME>_<INSTANCE_ID>
-                        // e.g., rest = "ENDPOINT_PRIMARY" -> field_name="ENDPOINT", instance_id="PRIMARY"
-                        Some(field) => (field.to_lowercase(), instance_id_part.to_lowercase()),
-                        // Case 2: The format is <FIELD_NAME> (without INSTANCE_ID)
-                        // e.g., rest = "ENABLE" -> field_name="ENABLE", instance_id="" (Universal configuration `_ DEFAULT_DELIMITER`)
-                        None => (instance_id_part.to_lowercase(), DEFAULT_DELIMITER.to_string()),
-                    };
-
-                    // *** Optimization point 2: Verify whether the parsed field_name is legal ***
-                    if !field_name.is_empty() && valid_fields.contains(&field_name) {
-                        debug!(
-                            instance_id = %if instance_id.is_empty() { DEFAULT_DELIMITER } else { &instance_id },
-                            %field_name,
-                            %value,
-                            "Parsing to environment variables"
-                        );
-                        env_overrides
-                            .entry(instance_id)
-                            .or_default()
-                            .insert(field_name, value.clone());
-                    } else {
-                        // Ignore illegal field names
-                        warn!(
-                            field_name = %field_name,
-                            "Ignore environment variable fields, not found in the list of valid fields for target type {}",
-                            target_type
-                        );
-                    }
-                }
-            }
-            debug!(?env_overrides, "Complete the environment variable analysis");
-
-            // 4. Determine all instance IDs that need to be processed
-            let mut all_instance_ids: HashSet<String> =
-                file_configs.keys().filter(|k| *k != DEFAULT_DELIMITER).cloned().collect();
-            all_instance_ids.extend(instance_ids_from_env);
-            debug!(?all_instance_ids, "Determine all instance IDs");
-
-            // 5. Merge configurations and create tasks for each instance
-            for id in all_instance_ids {
-                // 5.1. Merge configuration, priority: Environment variables > File instance configuration > File default configuration
-                let mut merged_config = default_cfg.clone();
-                // Instance-specific configuration in application files
-                if let Some(file_instance_cfg) = file_configs.get(&id) {
-                    merged_config.extend(file_instance_cfg.clone());
-                }
-                // Application instance-specific environment variable configuration
-                if let Some(env_instance_cfg) = env_overrides.get(&id) {
-                    // Convert HashMap<String, String> to KVS
-                    let mut kvs_from_env = KVS::new();
-                    for (k, v) in env_instance_cfg {
-                        kvs_from_env.insert(k.clone(), v.clone());
-                    }
-                    merged_config.extend(kvs_from_env);
-                }
-                debug!(instance_id = %id, ?merged_config, "Complete configuration merge");
-
-                // 5.2. Check if the instance is enabled
-                let enabled = merged_config
-                    .lookup(ENABLE_KEY)
-                    .map(|v| {
-                        EnableState::from_str(v.as_str())
-                            .ok()
-                            .map(|s| s.is_enabled())
-                            .unwrap_or(false)
-                    })
-                    .unwrap_or(false);
-
-                if enabled {
-                    info!(instance_id = %id, "Target is enabled, ready to create a task");
-                    // 5.3. Create asynchronous tasks for enabled instances
-                    let target_type_clone = target_type.clone();
-                    let tid = id.clone();
-                    let merged_config_arc = Arc::new(merged_config);
-                    tasks.push(async move {
-                        let result = factory.create_target(tid.clone(), &merged_config_arc).await;
-                        (target_type_clone, tid, result, Arc::clone(&merged_config_arc))
-                    });
-                } else {
-                    info!(instance_id = %id, "Skip the disabled target and will be removed from the final configuration");
-                    // Remove disabled target from final configuration
-                    // final_config.0.entry(section_name.clone()).or_default().remove(&id);
-                }
-            }
-        }
-
-        // 6. Concurrently execute all creation tasks and collect results
-        let mut successful_targets = Vec::new();
-        let mut successful_configs = Vec::new();
-        while let Some((target_type, id, result, final_config)) = tasks.next().await {
-            match result {
-                Ok(target) => {
-                    info!(target_type = %target_type, instance_id = %id, "Create a target successfully");
-                    successful_targets.push(target);
-                    successful_configs.push((target_type, id, final_config));
-                }
-                Err(e) => {
-                    error!(target_type = %target_type, instance_id = %id, error = %e, "Failed to create a target");
-                }
-            }
-        }
-
-        // 7. Aggregate new configuration and write back to system configuration
-        if !successful_configs.is_empty() || !section_defaults.is_empty() {
-            info!(
-                "Prepare to update {} successfully created target configurations to the system configuration...",
-                successful_configs.len()
-            );
-
-            let mut successes_by_section: HashMap<String, HashMap<String, KVS>> = HashMap::new();
-
-            for (target_type, id, kvs) in successful_configs {
-                let section_name = format!("{AUDIT_ROUTE_PREFIX}{target_type}").to_lowercase();
-                successes_by_section
-                    .entry(section_name)
-                    .or_default()
-                    .insert(id.to_lowercase(), (*kvs).clone());
-            }
-
-            let mut new_config = config.clone();
-            // Collection of segments that need to be processed: Collect all segments where default items exist or where successful instances exist
-            let mut sections: HashSet<String> = HashSet::new();
-            sections.extend(section_defaults.keys().cloned());
-            sections.extend(successes_by_section.keys().cloned());
-
-            for section in sections {
-                let mut section_map: std::collections::HashMap<String, KVS> = std::collections::HashMap::new();
-                // Add default item
-                if let Some(default_kvs) = section_defaults.get(&section)
-                    && !default_kvs.is_empty()
-                {
-                    section_map.insert(DEFAULT_DELIMITER.to_string(), default_kvs.clone());
-                }
-
-                // Add successful instance item
-                if let Some(instances) = successes_by_section.get(&section) {
-                    for (id, kvs) in instances {
-                        section_map.insert(id.clone(), kvs.clone());
-                    }
-                }
-
-                // Empty breaks are removed and non-empty breaks are replaced entirely.
-                if section_map.is_empty() {
-                    new_config.0.remove(&section);
-                } else {
-                    new_config.0.insert(section, section_map);
-                }
-            }
-
-            let Some(store) = rustfs_ecstore::global::new_object_layer_fn() else {
-                return Err(AuditError::StorageNotAvailable(
-                    "Failed to save target configuration: server storage not initialized".to_string(),
-                ));
-            };
-
-            match rustfs_ecstore::config::com::save_server_config(store, &new_config).await {
-                Ok(_) => {
-                    info!("The new configuration was saved to the system successfully.")
-                }
-                Err(e) => {
-                    error!("Failed to save the new configuration: {}", e);
-                    return Err(AuditError::SaveConfig(Box::new(e)));
-                }
-            }
-        }
-
-        info!(count = successful_targets.len(), "All target processing completed");
-        Ok(successful_targets)
-    }
-
-    /// Adds a target to the registry
-    ///
-    /// # Arguments
-    /// * `id` - The identifier for the target.
-    /// * `target` - The target instance to be added.
-    pub fn add_target(&mut self, id: String, target: Box<dyn Target<AuditEntry> + Send + Sync>) {
-        self.targets.insert(id, target);
-    }
-
-    /// Removes a target from the registry
-    ///
-    /// # Arguments
-    /// * `id` - The identifier for the target to be removed.
-    ///
-    /// # Returns
-    /// * `Option<Box<dyn Target<AuditEntry> + Send + Sync>>` - The removed target if it existed.
-    pub fn remove_target(&mut self, id: &str) -> Option<Box<dyn Target<AuditEntry> + Send + Sync>> {
-        self.targets.remove(id)
-    }
-
-    /// Gets a target from the registry
-    ///
-    /// # Arguments
-    /// * `id` - The identifier for the target to be retrieved.
-    ///
-    /// # Returns
-    /// * `Option<&(dyn Target<AuditEntry> + Send + Sync)>` - The target if it exists.
-    pub fn get_target(&self, id: &str) -> Option<&(dyn Target<AuditEntry> + Send + Sync)> {
-        self.targets.get(id).map(|t| t.as_ref())
-    }
-
-    /// Lists all target IDs
-    ///
-    /// # Returns
-    /// * `Vec<String>` - A vector of all target IDs in the registry.
-    pub fn list_targets(&self) -> Vec<String> {
-        self.targets.keys().cloned().collect()
-    }
-
-    /// Closes all targets and clears the registry
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure.
-    pub async fn close_all(&mut self) -> AuditResult<()> {
-        let mut errors = Vec::new();
-
-        for (id, target) in self.targets.drain() {
-            if let Err(e) = target.close().await {
-                error!(target_id = %id, error = %e, "Failed to close audit target");
-                errors.push(e);
-            }
-        }
-
-        if !errors.is_empty() {
-            return Err(AuditError::Target(errors.into_iter().next().unwrap()));
-        }
-
-        Ok(())
-    }
-
-    /// Creates a unique key for a target based on its type and ID
-    ///
-    /// # Arguments
-    /// * `target_type` - The type of the target (e.g., "webhook", "mqtt").
-    /// * `target_id` - The identifier for the target instance.
-    ///
-    /// # Returns
-    /// * `String` - The unique key for the target.
-    pub fn create_key(&self, target_type: &str, target_id: &str) -> String {
-        let key = TargetID::new(target_id.to_string(), target_type.to_string());
-        info!(target_type = %target_type, "Create key for {}", key);
-        key.to_string()
-    }
-
-    /// Enables a target (placeholder, assumes target exists)
-    ///
-    /// # Arguments
-    /// * `target_type` - The type of the target (e.g., "webhook", "mqtt").
-    /// * `target_id` - The identifier for the target instance.
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure.
-    pub fn enable_target(&self, target_type: &str, target_id: &str) -> AuditResult<()> {
-        let key = self.create_key(target_type, target_id);
-        if self.get_target(&key).is_some() {
-            info!("Target {}-{} enabled", target_type, target_id);
-            Ok(())
-        } else {
-            Err(AuditError::Configuration(
-                format!("Target not found: {}-{}", target_type, target_id),
-                None,
-            ))
-        }
-    }
-
-    /// Disables a target (placeholder, assumes target exists)
-    ///
-    /// # Arguments
-    /// * `target_type` - The type of the target (e.g., "webhook", "mqtt").
-    /// * `target_id` - The identifier for the target instance.
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure.
-    pub fn disable_target(&self, target_type: &str, target_id: &str) -> AuditResult<()> {
-        let key = self.create_key(target_type, target_id);
-        if self.get_target(&key).is_some() {
-            info!("Target {}-{} disabled", target_type, target_id);
-            Ok(())
-        } else {
-            Err(AuditError::Configuration(
-                format!("Target not found: {}-{}", target_type, target_id),
-                None,
-            ))
-        }
-    }
-
-    /// Upserts a target into the registry
-    ///
-    /// # Arguments
-    /// * `target_type` - The type of the target (e.g., "webhook", "mqtt").
-    /// * `target_id` - The identifier for the target instance.
-    /// * `target` - The target instance to be upserted.
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure.
-    pub fn upsert_target(
-        &mut self,
-        target_type: &str,
-        target_id: &str,
-        target: Box<dyn Target<AuditEntry> + Send + Sync>,
-    ) -> AuditResult<()> {
-        let key = self.create_key(target_type, target_id);
-        self.targets.insert(key, target);
-        Ok(())
-    }
-}
@@ -1,694 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-use crate::{AuditEntry, AuditError, AuditRegistry, AuditResult, observability};
-use rustfs_ecstore::config::Config;
-use rustfs_targets::{
-    StoreError, Target, TargetError,
-    store::{Key, Store},
-    target::EntityTarget,
-};
-use std::sync::Arc;
-use tokio::sync::{Mutex, RwLock};
-use tracing::{error, info, warn};
-
-/// State of the audit system
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum AuditSystemState {
-    Stopped,
-    Starting,
-    Running,
-    Paused,
-    Stopping,
-}
-
-/// Main audit system that manages target lifecycle and audit log dispatch
-#[derive(Clone)]
-pub struct AuditSystem {
-    registry: Arc<Mutex<AuditRegistry>>,
-    state: Arc<RwLock<AuditSystemState>>,
-    config: Arc<RwLock<Option<Config>>>,
-}
-
-impl Default for AuditSystem {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-impl AuditSystem {
-    /// Creates a new audit system
-    pub fn new() -> Self {
-        Self {
-            registry: Arc::new(Mutex::new(AuditRegistry::new())),
-            state: Arc::new(RwLock::new(AuditSystemState::Stopped)),
-            config: Arc::new(RwLock::new(None)),
-        }
-    }
-
-    /// Starts the audit system with the given configuration
-    ///
-    /// # Arguments
-    /// * `config` - The configuration to use for starting the audit system
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn start(&self, config: Config) -> AuditResult<()> {
-        let state = self.state.write().await;
-
-        match *state {
-            AuditSystemState::Running => {
-                return Err(AuditError::AlreadyInitialized);
-            }
-            AuditSystemState::Starting => {
-                warn!("Audit system is already starting");
-                return Ok(());
-            }
-            _ => {}
-        }
-
-        drop(state);
-
-        info!("Starting audit system");
-
-        // Record system start
-        observability::record_system_start();
-
-        // Store configuration
-        {
-            let mut config_guard = self.config.write().await;
-            *config_guard = Some(config.clone());
-        }
-
-        // Create targets from configuration
-        let mut registry = self.registry.lock().await;
-        match registry.create_audit_targets_from_config(&config).await {
-            Ok(targets) => {
-                if targets.is_empty() {
-                    info!("No enabled audit targets found, keeping audit system stopped");
-                    drop(registry);
-                    return Ok(());
-                }
-
-                {
-                    let mut state = self.state.write().await;
-                    *state = AuditSystemState::Starting;
-                }
-
-                info!(target_count = targets.len(), "Created audit targets successfully");
-
-                // Initialize all targets
-                for target in targets {
-                    let target_id = target.id().to_string();
-                    if let Err(e) = target.init().await {
-                        error!(target_id = %target_id, error = %e, "Failed to initialize audit target");
-                    } else {
-                        // After successful initialization, if enabled and there is a store, start the send from storage task
-                        if target.is_enabled() {
-                            if let Some(store) = target.store() {
-                                info!(target_id = %target_id, "Start audit stream processing for target");
-                                let store_clone: Box<dyn Store<EntityTarget<AuditEntry>, Error = StoreError, Key = Key> + Send> =
-                                    store.boxed_clone();
-                                let target_arc: Arc<dyn Target<AuditEntry> + Send + Sync> = Arc::from(target.clone_dyn());
-                                self.start_audit_stream_with_batching(store_clone, target_arc);
-                                info!(target_id = %target_id, "Audit stream processing started");
-                            } else {
-                                info!(target_id = %target_id, "No store configured, skip audit stream processing");
-                            }
-                        } else {
-                            info!(target_id = %target_id, "Target disabled, skip audit stream processing");
-                        }
-                        registry.add_target(target_id, target);
-                    }
-                }
-
-                // Update state to running
-                let mut state = self.state.write().await;
-                *state = AuditSystemState::Running;
-                info!("Audit system started successfully");
-                Ok(())
-            }
-            Err(e) => {
-                error!(error = %e, "Failed to create audit targets");
-                let mut state = self.state.write().await;
-                *state = AuditSystemState::Stopped;
-                Err(e)
-            }
-        }
-    }
-
-    /// Pauses the audit system
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn pause(&self) -> AuditResult<()> {
-        let mut state = self.state.write().await;
-
-        match *state {
-            AuditSystemState::Running => {
-                *state = AuditSystemState::Paused;
-                info!("Audit system paused");
-                Ok(())
-            }
-            AuditSystemState::Paused => {
-                warn!("Audit system is already paused");
-                Ok(())
-            }
-            _ => Err(AuditError::Configuration("Cannot pause audit system in current state".to_string(), None)),
-        }
-    }
-
-    /// Resumes the audit system
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn resume(&self) -> AuditResult<()> {
-        let mut state = self.state.write().await;
-
-        match *state {
-            AuditSystemState::Paused => {
-                *state = AuditSystemState::Running;
-                info!("Audit system resumed");
-                Ok(())
-            }
-            AuditSystemState::Running => {
-                warn!("Audit system is already running");
-                Ok(())
-            }
-            _ => Err(AuditError::Configuration("Cannot resume audit system in current state".to_string(), None)),
-        }
-    }
-
-    /// Stops the audit system and closes all targets
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn close(&self) -> AuditResult<()> {
-        let mut state = self.state.write().await;
-
-        match *state {
-            AuditSystemState::Stopped => {
-                warn!("Audit system is already stopped");
-                return Ok(());
-            }
-            AuditSystemState::Stopping => {
-                warn!("Audit system is already stopping");
-                return Ok(());
-            }
-            _ => {}
-        }
-
-        *state = AuditSystemState::Stopping;
-        drop(state);
-
-        info!("Stopping audit system");
-
-        // Close all targets
-        let mut registry = self.registry.lock().await;
-        if let Err(e) = registry.close_all().await {
-            error!(error = %e, "Failed to close some audit targets");
-        }
-
-        // Update state to stopped
-        let mut state = self.state.write().await;
-        *state = AuditSystemState::Stopped;
-
-        // Clear configuration
-        let mut config_guard = self.config.write().await;
-        *config_guard = None;
-
-        info!("Audit system stopped");
-        Ok(())
-    }
-
-    /// Gets the current state of the audit system
-    pub async fn get_state(&self) -> AuditSystemState {
-        self.state.read().await.clone()
-    }
-
-    /// Checks if the audit system is running
-    ///
-    /// # Returns
-    /// * `bool` - True if running, false otherwise
-    pub async fn is_running(&self) -> bool {
-        matches!(*self.state.read().await, AuditSystemState::Running)
-    }
-
-    /// Dispatches an audit log entry to all active targets
-    ///
-    /// # Arguments
-    /// * `entry` - The audit log entry to dispatch
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn dispatch(&self, entry: Arc<AuditEntry>) -> AuditResult<()> {
-        let start_time = std::time::Instant::now();
-
-        let state = self.state.read().await;
-
-        match *state {
-            AuditSystemState::Running => {
-                // Continue with dispatch
-                info!("Dispatching audit log entry");
-            }
-            AuditSystemState::Paused => {
-                // Skip dispatch when paused
-                return Ok(());
-            }
-            _ => {
-                // Don't dispatch when not running
-                return Err(AuditError::NotInitialized("Audit system is not running".to_string()));
-            }
-        }
-        drop(state);
-
-        let registry = self.registry.lock().await;
-        let target_keys = registry.list_targets();
-
-        if target_keys.is_empty() {
-            warn!("No audit targets configured for dispatch");
-            return Ok(());
-        }
-
-        // Dispatch to all targets concurrently
-        let mut tasks = Vec::new();
-
-        for target_key in target_keys {
-            if let Some(target) = registry.get_target(&target_key) {
-                let entry_clone = Arc::clone(&entry);
-                let target_key_clone = target_key.clone();
-
-                // Create EntityTarget for the audit log entry
-                let entity_target = EntityTarget {
-                    object_name: entry.api.name.clone().unwrap_or_default(),
-                    bucket_name: entry.api.bucket.clone().unwrap_or_default(),
-                    event_name: entry.event, // Default, should be derived from entry
-                    data: (*entry_clone).clone(),
-                };
-
-                let task = async move {
-                    let result = target.save(Arc::new(entity_target)).await;
-                    (target_key_clone, result)
-                };
-
-                tasks.push(task);
-            }
-        }
-
-        // Execute all dispatch tasks
-        let results = futures::future::join_all(tasks).await;
-
-        let mut errors = Vec::new();
-        let mut success_count = 0;
-
-        for (target_key, result) in results {
-            match result {
-                Ok(_) => {
-                    success_count += 1;
-                    observability::record_target_success();
-                }
-                Err(e) => {
-                    error!(target_id = %target_key, error = %e, "Failed to dispatch audit log to target");
-                    errors.push(e);
-                    observability::record_target_failure();
-                }
-            }
-        }
-
-        let dispatch_time = start_time.elapsed();
-
-        if errors.is_empty() {
-            observability::record_audit_success(dispatch_time);
-        } else {
-            observability::record_audit_failure(dispatch_time);
-            // Log errors but don't fail the entire dispatch
-            warn!(
-                error_count = errors.len(),
-                success_count = success_count,
-                "Some audit targets failed to receive log entry"
-            );
-        }
-
-        Ok(())
-    }
-
-    /// Dispatches a batch of audit log entries to all active targets
-    ///
-    /// # Arguments
-    /// * `entries` - A vector of audit log entries to dispatch
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn dispatch_batch(&self, entries: Vec<Arc<AuditEntry>>) -> AuditResult<()> {
-        let start_time = std::time::Instant::now();
-
-        let state = self.state.read().await;
-        if *state != AuditSystemState::Running {
-            return Err(AuditError::NotInitialized("Audit system is not running".to_string()));
-        }
-        drop(state);
-
-        let registry = self.registry.lock().await;
-        let target_keys = registry.list_targets();
-
-        if target_keys.is_empty() {
-            warn!("No audit targets configured for batch dispatch");
-            return Ok(());
-        }
-
-        let mut tasks = Vec::new();
-        for target_key in target_keys {
-            if let Some(target) = registry.get_target(&target_key) {
-                let entries_clone: Vec<_> = entries.iter().map(Arc::clone).collect();
-                let target_key_clone = target_key.clone();
-
-                let task = async move {
-                    let mut success_count = 0;
-                    let mut errors = Vec::new();
-                    for entry in entries_clone {
-                        let entity_target = EntityTarget {
-                            object_name: entry.api.name.clone().unwrap_or_default(),
-                            bucket_name: entry.api.bucket.clone().unwrap_or_default(),
-                            event_name: entry.event,
-                            data: (*entry).clone(),
-                        };
-                        match target.save(Arc::new(entity_target)).await {
-                            Ok(_) => success_count += 1,
-                            Err(e) => errors.push(e),
-                        }
-                    }
-                    (target_key_clone, success_count, errors)
-                };
-                tasks.push(task);
-            }
-        }
-
-        let results = futures::future::join_all(tasks).await;
-        let mut total_success = 0;
-        let mut total_errors = 0;
-        for (_target_id, success_count, errors) in results {
-            total_success += success_count;
-            total_errors += errors.len();
-            for e in errors {
-                error!("Batch dispatch error: {:?}", e);
-            }
-        }
-
-        let dispatch_time = start_time.elapsed();
-        info!(
-            "Batch dispatched {} entries, success: {}, errors: {}, time: {:?}",
-            entries.len(),
-            total_success,
-            total_errors,
-            dispatch_time
-        );
-
-        Ok(())
-    }
-
-    /// Starts the audit stream processing for a target with batching and retry logic
-    ///
-    /// # Arguments
-    /// * `store` - The store from which to read audit entries
-    /// * `target` - The target to which audit entries will be sent
-    ///
-    /// This function spawns a background task that continuously reads audit entries from the provided store
-    /// and attempts to send them to the specified target. It implements retry logic with exponential backoff
-    fn start_audit_stream_with_batching(
-        &self,
-        store: Box<dyn Store<EntityTarget<AuditEntry>, Error = StoreError, Key = Key> + Send>,
-        target: Arc<dyn Target<AuditEntry> + Send + Sync>,
-    ) {
-        let state = self.state.clone();
-
-        tokio::spawn(async move {
-            use std::time::Duration;
-            use tokio::time::sleep;
-
-            info!("Starting audit stream for target: {}", target.id());
-
-            const MAX_RETRIES: usize = 5;
-            const BASE_RETRY_DELAY: Duration = Duration::from_secs(2);
-
-            loop {
-                match *state.read().await {
-                    AuditSystemState::Running | AuditSystemState::Paused | AuditSystemState::Starting => {}
-                    _ => {
-                        info!("Audit stream stopped for target: {}", target.id());
-                        break;
-                    }
-                }
-
-                let keys: Vec<Key> = store.list();
-                if keys.is_empty() {
-                    sleep(Duration::from_millis(500)).await;
-                    continue;
-                }
-
-                for key in keys {
-                    let mut retries = 0usize;
-                    let mut success = false;
-
-                    while retries < MAX_RETRIES && !success {
-                        match target.send_from_store(key.clone()).await {
-                            Ok(_) => {
-                                info!("Successfully sent audit entry, target: {}, key: {}", target.id(), key.to_string());
-                                observability::record_target_success();
-                                success = true;
-                            }
-                            Err(e) => {
-                                match &e {
-                                    TargetError::NotConnected => {
-                                        warn!("Target {} not connected, retrying...", target.id());
-                                    }
-                                    TargetError::Timeout(_) => {
-                                        warn!("Timeout sending to target {}, retrying...", target.id());
-                                    }
-                                    _ => {
-                                        error!("Permanent error for target {}: {}", target.id(), e);
-                                        observability::record_target_failure();
-                                        break;
-                                    }
-                                }
-                                retries += 1;
-                                let backoff = BASE_RETRY_DELAY * (1 << retries);
-                                sleep(backoff).await;
-                            }
-                        }
-                    }
-
-                    if retries >= MAX_RETRIES && !success {
-                        warn!("Max retries exceeded for key {}, target: {}, skipping", key.to_string(), target.id());
-                        observability::record_target_failure();
-                    }
-                }
-
-                sleep(Duration::from_millis(100)).await;
-            }
-        });
-    }
-
-    /// Enables a specific target
-    ///
-    /// # Arguments
-    /// * `target_id` - The ID of the target to enable, TargetID to string
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn enable_target(&self, target_id: &str) -> AuditResult<()> {
-        // This would require storing enabled/disabled state per target
-        // For now, just check if target exists
-        let registry = self.registry.lock().await;
-        if registry.get_target(target_id).is_some() {
-            info!(target_id = %target_id, "Target enabled");
-            Ok(())
-        } else {
-            Err(AuditError::Configuration(format!("Target not found: {target_id}"), None))
-        }
-    }
-
-    /// Disables a specific target
-    ///
-    /// # Arguments
-    /// * `target_id` - The ID of the target to disable, TargetID to string
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn disable_target(&self, target_id: &str) -> AuditResult<()> {
-        // This would require storing enabled/disabled state per target
-        // For now, just check if target exists
-        let registry = self.registry.lock().await;
-        if registry.get_target(target_id).is_some() {
-            info!(target_id = %target_id, "Target disabled");
-            Ok(())
-        } else {
-            Err(AuditError::Configuration(format!("Target not found: {target_id}"), None))
-        }
-    }
-
-    /// Removes a target from the system
-    ///
-    /// # Arguments
-    /// * `target_id` - The ID of the target to remove, TargetID to string
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn remove_target(&self, target_id: &str) -> AuditResult<()> {
-        let mut registry = self.registry.lock().await;
-        if let Some(target) = registry.remove_target(target_id) {
-            if let Err(e) = target.close().await {
-                error!(target_id = %target_id, error = %e, "Failed to close removed target");
-            }
-            info!(target_id = %target_id, "Target removed");
-            Ok(())
-        } else {
-            Err(AuditError::Configuration(format!("Target not found: {target_id}"), None))
-        }
-    }
-
-    /// Updates or inserts a target
-    ///
-    /// # Arguments
-    /// * `target_id` - The ID of the target to upsert, TargetID to string
-    /// * `target` - The target instance to insert or update
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn upsert_target(&self, target_id: String, target: Box<dyn Target<AuditEntry> + Send + Sync>) -> AuditResult<()> {
-        let mut registry = self.registry.lock().await;
-
-        // Initialize the target
-        if let Err(e) = target.init().await {
-            return Err(AuditError::Target(e));
-        }
-
-        // Remove existing target if present
-        if let Some(old_target) = registry.remove_target(&target_id)
-            && let Err(e) = old_target.close().await
-        {
-            error!(target_id = %target_id, error = %e, "Failed to close old target during upsert");
-        }
-
-        registry.add_target(target_id.clone(), target);
-        info!(target_id = %target_id, "Target upserted");
-        Ok(())
-    }
-
-    /// Lists all targets
-    ///
-    /// # Returns
-    /// * `Vec<String>` - List of target IDs
-    pub async fn list_targets(&self) -> Vec<String> {
-        let registry = self.registry.lock().await;
-        registry.list_targets()
-    }
-
-    /// Gets information about a specific target
-    ///
-    /// # Arguments
-    /// * `target_id` - The ID of the target to retrieve, TargetID to string
-    ///
-    /// # Returns
-    /// * `Option<String>` - Target ID if found
-    pub async fn get_target(&self, target_id: &str) -> Option<String> {
-        let registry = self.registry.lock().await;
-        registry.get_target(target_id).map(|target| target.id().to_string())
-    }
-
-    /// Reloads configuration and updates targets
-    ///
-    /// # Arguments
-    /// * `new_config` - The new configuration to load
-    ///
-    /// # Returns
-    /// * `AuditResult<()>` - Result indicating success or failure
-    pub async fn reload_config(&self, new_config: Config) -> AuditResult<()> {
-        info!("Reloading audit system configuration");
-
-        // Record config reload
-        observability::record_config_reload();
-
-        // Store new configuration
-        {
-            let mut config_guard = self.config.write().await;
-            *config_guard = Some(new_config.clone());
-        }
-
-        // Close all existing targets
-        let mut registry = self.registry.lock().await;
-        if let Err(e) = registry.close_all().await {
-            error!(error = %e, "Failed to close existing targets during reload");
-        }
-
-        // Create new targets from updated configuration
-        match registry.create_audit_targets_from_config(&new_config).await {
-            Ok(targets) => {
-                info!(target_count = targets.len(), "Reloaded audit targets successfully");
-
-                // Initialize all new targets
-                for target in targets {
-                    let target_id = target.id().to_string();
-                    if let Err(e) = target.init().await {
-                        error!(target_id = %target_id, error = %e, "Failed to initialize reloaded audit target");
-                    } else {
-                        // Same starts the storage stream after a heavy load
-                        if target.is_enabled() {
-                            if let Some(store) = target.store() {
-                                info!(target_id = %target_id, "Start audit stream processing for target (reload)");
-                                let store_clone: Box<dyn Store<EntityTarget<AuditEntry>, Error = StoreError, Key = Key> + Send> =
-                                    store.boxed_clone();
-                                let target_arc: Arc<dyn Target<AuditEntry> + Send + Sync> = Arc::from(target.clone_dyn());
-                                self.start_audit_stream_with_batching(store_clone, target_arc);
-                                info!(target_id = %target_id, "Audit stream processing started (reload)");
-                            } else {
-                                info!(target_id = %target_id, "No store configured, skip audit stream processing (reload)");
-                            }
-                        } else {
-                            info!(target_id = %target_id, "Target disabled, skip audit stream processing (reload)");
-                        }
-                        registry.add_target(target.id().to_string(), target);
-                    }
-                }
-
-                info!("Audit configuration reloaded successfully");
-                Ok(())
-            }
-            Err(e) => {
-                error!(error = %e, "Failed to reload audit configuration");
-                Err(e)
-            }
-        }
-    }
-
-    /// Gets current audit system metrics
-    ///
-    /// # Returns
-    /// * `AuditMetricsReport` - Current metrics report
-    pub async fn get_metrics(&self) -> observability::AuditMetricsReport {
-        observability::get_metrics_report().await
-    }
-
-    /// Validates system performance against requirements
-    ///
-    /// # Returns
-    /// * `PerformanceValidation` - Performance validation results
-    pub async fn validate_performance(&self) -> observability::PerformanceValidation {
-        observability::validate_performance().await
-    }
-
-    /// Resets all metrics to initial state
-    pub async fn reset_metrics(&self) {
-        observability::reset_metrics().await;
-    }
-}
@@ -1,219 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-//! Tests for audit configuration parsing and validation
-
-use rustfs_ecstore::config::KVS;
-
-#[test]
-fn test_webhook_valid_fields() {
-    let expected_fields = vec![
-        "enable",
-        "endpoint",
-        "auth_token",
-        "client_cert",
-        "client_key",
-        "batch_size",
-        "queue_size",
-        "queue_dir",
-        "max_retry",
-        "retry_interval",
-        "http_timeout",
-    ];
-
-    // This tests the webhook configuration fields we support
-    for field in expected_fields {
-        // Basic validation that field names are consistent
-        assert!(!field.is_empty());
-        assert!(!field.contains(" "));
-    }
-}
-
-#[test]
-fn test_mqtt_valid_fields() {
-    let expected_fields = vec![
-        "enable",
-        "broker",
-        "topic",
-        "username",
-        "password",
-        "qos",
-        "keep_alive_interval",
-        "reconnect_interval",
-        "queue_dir",
-        "queue_limit",
-    ];
-
-    // This tests the MQTT configuration fields we support
-    for field in expected_fields {
-        // Basic validation that field names are consistent
-        assert!(!field.is_empty());
-        assert!(!field.contains(" "));
-    }
-}
-
-#[test]
-fn test_config_section_names() {
-    // Test audit route prefix and section naming
-    let webhook_section = "audit_webhook";
-    let mqtt_section = "audit_mqtt";
-
-    assert_eq!(webhook_section, "audit_webhook");
-    assert_eq!(mqtt_section, "audit_mqtt");
-
-    // Verify section names follow expected pattern
-    assert!(webhook_section.starts_with("audit_"));
-    assert!(mqtt_section.starts_with("audit_"));
-}
-
-#[test]
-fn test_environment_variable_parsing() {
-    // Test environment variable prefix patterns
-    let env_prefix = "RUSTFS_";
-    let audit_webhook_prefix = format!("{env_prefix}AUDIT_WEBHOOK_");
-    let audit_mqtt_prefix = format!("{env_prefix}AUDIT_MQTT_");
-
-    assert_eq!(audit_webhook_prefix, "RUSTFS_AUDIT_WEBHOOK_");
-    assert_eq!(audit_mqtt_prefix, "RUSTFS_AUDIT_MQTT_");
-
-    // Test instance parsing
-    let example_env_var = "RUSTFS_AUDIT_WEBHOOK_ENABLE_PRIMARY";
-    assert!(example_env_var.starts_with(&audit_webhook_prefix));
-
-    let suffix = &example_env_var[audit_webhook_prefix.len()..];
-    assert_eq!(suffix, "ENABLE_PRIMARY");
-
-    // Parse field and instance
-    if let Some(last_underscore) = suffix.rfind('_') {
-        let field = &suffix[..last_underscore];
-        let instance = &suffix[last_underscore + 1..];
-        assert_eq!(field, "ENABLE");
-        assert_eq!(instance, "PRIMARY");
-    }
-}
-
-#[test]
-fn test_configuration_merge() {
-    // Test configuration merging precedence: ENV > file instance > file default
-    let mut default_config = KVS::new();
-    default_config.insert("enable".to_string(), "off".to_string());
-    default_config.insert("endpoint".to_string(), "http://default".to_string());
-
-    let mut instance_config = KVS::new();
-    instance_config.insert("endpoint".to_string(), "http://instance".to_string());
-
-    let mut env_config = KVS::new();
-    env_config.insert("enable".to_string(), "on".to_string());
-
-    // Simulate merge: default < instance < env
-    let mut merged = default_config.clone();
-    merged.extend(instance_config);
-    merged.extend(env_config);
-
-    // Verify merge results
-    assert_eq!(merged.lookup("enable"), Some("on".to_string()));
-    assert_eq!(merged.lookup("endpoint"), Some("http://instance".to_string()));
-}
-
-#[test]
-fn test_duration_parsing_formats() {
-    let test_cases = vec![
-        ("3s", Some(3)),
-        ("5m", Some(300)),   // 5 minutes = 300 seconds
-        ("1000ms", Some(1)), // 1000ms = 1 second
-        ("60", Some(60)),    // Default to seconds
-        ("invalid", None),
-        ("", None),
-    ];
-
-    for (input, expected_seconds) in test_cases {
-        let result = parse_duration_test(input);
-        match (result, expected_seconds) {
-            (Some(duration), Some(expected)) => {
-                assert_eq!(duration.as_secs(), expected, "Failed for input: {input}");
-            }
-            (None, None) => {
-                // Both None, test passes
-            }
-            _ => {
-                panic!("Mismatch for input: {input}, got: {result:?}, expected: {expected_seconds:?}");
-            }
-        }
-    }
-}
-
-// Helper function for duration parsing (extracted from registry.rs logic)
-fn parse_duration_test(s: &str) -> Option<std::time::Duration> {
-    use std::time::Duration;
-
-    if let Some(stripped) = s.strip_suffix("ms") {
-        stripped.parse::<u64>().ok().map(Duration::from_millis)
-    } else if let Some(stripped) = s.strip_suffix('s') {
-        stripped.parse::<u64>().ok().map(Duration::from_secs)
-    } else if let Some(stripped) = s.strip_suffix('m') {
-        stripped.parse::<u64>().ok().map(|m| Duration::from_secs(m * 60))
-    } else {
-        s.parse::<u64>().ok().map(Duration::from_secs)
-    }
-}
-
-#[test]
-fn test_url_validation() {
-    use url::Url;
-
-    let valid_urls = vec![
-        "http://localhost:3020/webhook",
-        "https://api.example.com/audit",
-        "mqtt://broker.example.com:1883",
-        "tcp://localhost:1883",
-    ];
-
-    let invalid_urls = [
-        "",
-        "not-a-url",
-        "http://",
-        "ftp://unsupported.com", // Not invalid, but might not be supported
-    ];
-
-    for url_str in valid_urls {
-        let result = Url::parse(url_str);
-        assert!(result.is_ok(), "Valid URL should parse: {url_str}");
-    }
-
-    for url_str in &invalid_urls[..3] {
-        // Skip the ftp one as it's technically valid
-        let result = Url::parse(url_str);
-        assert!(result.is_err(), "Invalid URL should not parse: {url_str}");
-    }
-}
-
-#[test]
-fn test_qos_parsing() {
-    // Test QoS level parsing for MQTT
-    let test_cases = vec![
-        ("0", Some(0)),
-        ("1", Some(1)),
-        ("2", Some(2)),
-        ("3", None), // Invalid QoS level
-        ("invalid", None),
-    ];
-
-    for (input, expected) in test_cases {
-        let result = input.parse::<u8>().ok().and_then(|q| match q {
-            0..=2 => Some(q),
-            _ => None,
-        });
-        assert_eq!(result, expected, "Failed for QoS input: {input}");
-    }
-}
@@ -1,108 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-use rustfs_audit::*;
-use rustfs_ecstore::config::{Config, KVS};
-use std::collections::HashMap;
-
-#[tokio::test]
-async fn test_audit_system_creation() {
-    let system = AuditSystem::new();
-    let state = system.get_state().await;
-    assert_eq!(state, rustfs_audit::system::AuditSystemState::Stopped);
-}
-
-#[tokio::test]
-async fn test_audit_registry_creation() {
-    let registry = AuditRegistry::new();
-    let targets = registry.list_targets();
-    assert!(targets.is_empty());
-}
-
-#[tokio::test]
-async fn test_config_parsing_webhook() {
-    let mut config = Config(HashMap::new());
-    let mut audit_webhook_section = HashMap::new();
-
-    // Create default configuration
-    let mut default_kvs = KVS::new();
-    default_kvs.insert("enable".to_string(), "on".to_string());
-    default_kvs.insert("endpoint".to_string(), "http://localhost:3020/webhook".to_string());
-
-    audit_webhook_section.insert("_".to_string(), default_kvs);
-    config.0.insert("audit_webhook".to_string(), audit_webhook_section);
-
-    let registry = AuditRegistry::new();
-
-    // This should not fail even if server storage is not initialized
-    // as it's an integration test
-    let result = registry.create_audit_targets_from_config(&config).await;
-
-    // We expect this to fail due to server storage not being initialized
-    // but the parsing should work correctly
-    match result {
-        Err(AuditError::StorageNotAvailable(_)) => {
-            // This is expected in test environment
-        }
-        Err(e) => {
-            // Other errors might indicate parsing issues
-            println!("Unexpected error: {e}");
-        }
-        Ok(_) => {
-            // Unexpected success in test environment without server storage
-        }
-    }
-}
-
-#[test]
-fn test_event_name_parsing() {
-    use rustfs_targets::EventName;
-
-    // Test basic event name parsing
-    let event = EventName::parse("s3:ObjectCreated:Put").unwrap();
-    assert_eq!(event, EventName::ObjectCreatedPut);
-
-    let event = EventName::parse("s3:ObjectAccessed:*").unwrap();
-    assert_eq!(event, EventName::ObjectAccessedAll);
-
-    // Test event name expansion
-    let expanded = EventName::ObjectCreatedAll.expand();
-    assert!(expanded.contains(&EventName::ObjectCreatedPut));
-    assert!(expanded.contains(&EventName::ObjectCreatedPost));
-
-    // Test event name mask
-    let mask = EventName::ObjectCreatedPut.mask();
-    assert!(mask > 0);
-}
-
-#[test]
-fn test_enable_value_parsing() {
-    // Test different enable value formats
-    let test_cases = vec![
-        ("1", true),
-        ("on", true),
-        ("true", true),
-        ("yes", true),
-        ("0", false),
-        ("off", false),
-        ("false", false),
-        ("no", false),
-        ("invalid", false),
-    ];
-
-    for (input, expected) in test_cases {
-        let result = matches!(input.to_lowercase().as_str(), "1" | "on" | "true" | "yes");
-        assert_eq!(result, expected, "Failed for input: {input}");
-    }
-}
@@ -1,276 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-//! Tests for audit system observability and metrics
-
-use rustfs_audit::observability::*;
-use std::time::Duration;
-
-#[tokio::test]
-async fn test_metrics_collection() {
-    let metrics = AuditMetrics::new();
-
-    // Initially all metrics should be zero
-    let report = metrics.generate_report().await;
-    assert_eq!(report.total_events_processed, 0);
-    assert_eq!(report.total_events_failed, 0);
-    assert_eq!(report.events_per_second, 0.0);
-
-    // Record some events
-    metrics.record_event_success(Duration::from_millis(10));
-    metrics.record_event_success(Duration::from_millis(20));
-    metrics.record_event_failure(Duration::from_millis(30));
-
-    // Check updated metrics
-    let report = metrics.generate_report().await;
-    assert_eq!(report.total_events_processed, 2);
-    assert_eq!(report.total_events_failed, 1);
-    assert_eq!(report.error_rate_percent, 33.33333333333333); // 1/3 * 100
-    assert_eq!(report.average_latency_ms, 20.0); // (10+20+30)/3
-}
-
-#[tokio::test]
-async fn test_target_metrics() {
-    let metrics = AuditMetrics::new();
-
-    // Record target operations
-    metrics.record_target_success();
-    metrics.record_target_success();
-    metrics.record_target_failure();
-
-    let success_rate = metrics.get_target_success_rate();
-    assert_eq!(success_rate, 66.66666666666666); // 2/3 * 100
-}
-
-#[tokio::test]
-async fn test_performance_validation_pass() {
-    let metrics = AuditMetrics::new();
-
-    // Simulate high EPS with low latency
-    for _ in 0..5000 {
-        metrics.record_event_success(Duration::from_millis(5));
-    }
-
-    // Small delay to make EPS calculation meaningful
-    tokio::time::sleep(Duration::from_millis(1)).await;
-
-    let validation = metrics.validate_performance_requirements().await;
-
-    // Should meet latency requirement
-    assert!(validation.meets_latency_requirement, "Latency requirement should be met");
-    assert!(validation.current_latency_ms <= 30.0);
-
-    // Should meet error rate requirement (no failures)
-    assert!(validation.meets_error_rate_requirement, "Error rate requirement should be met");
-    assert_eq!(validation.current_error_rate, 0.0);
-}
-
-#[tokio::test]
-async fn test_performance_validation_fail() {
-    let metrics = AuditMetrics::new();
-
-    // Simulate high latency
-    metrics.record_event_success(Duration::from_millis(50)); // Above 30ms requirement
-    metrics.record_event_failure(Duration::from_millis(60));
-
-    let validation = metrics.validate_performance_requirements().await;
-
-    // Should fail latency requirement
-    assert!(!validation.meets_latency_requirement, "Latency requirement should fail");
-    assert!(validation.current_latency_ms > 30.0);
-
-    // Should fail error rate requirement
-    assert!(!validation.meets_error_rate_requirement, "Error rate requirement should fail");
-    assert!(validation.current_error_rate > 1.0);
-
-    // Should have recommendations
-    assert!(!validation.recommendations.is_empty());
-}
-
-#[tokio::test]
-async fn test_global_metrics() {
-    // Test global metrics functions
-    record_audit_success(Duration::from_millis(10));
-    record_audit_failure(Duration::from_millis(20));
-    record_target_success();
-    record_target_failure();
-    record_config_reload();
-    record_system_start();
-
-    let report = get_metrics_report().await;
-    assert!(report.total_events_processed > 0);
-    assert!(report.total_events_failed > 0);
-    assert!(report.config_reload_count > 0);
-    assert!(report.system_start_count > 0);
-
-    // Reset metrics
-    reset_metrics().await;
-
-    let report_after_reset = get_metrics_report().await;
-    assert_eq!(report_after_reset.total_events_processed, 0);
-    assert_eq!(report_after_reset.total_events_failed, 0);
-}
-
-#[test]
-fn test_metrics_report_formatting() {
-    let report = AuditMetricsReport {
-        events_per_second: 1500.5,
-        average_latency_ms: 25.75,
-        error_rate_percent: 0.5,
-        target_success_rate_percent: 99.5,
-        total_events_processed: 10000,
-        total_events_failed: 50,
-        config_reload_count: 3,
-        system_start_count: 1,
-    };
-
-    let formatted = report.format();
-    assert!(formatted.contains("1500.50")); // EPS
-    assert!(formatted.contains("25.75")); // Latency
-    assert!(formatted.contains("0.50")); // Error rate
-    assert!(formatted.contains("99.50")); // Success rate
-    assert!(formatted.contains("10000")); // Events processed
-    assert!(formatted.contains("50")); // Events failed
-}
-
-#[test]
-fn test_performance_validation_formatting() {
-    let validation = PerformanceValidation {
-        meets_eps_requirement: false,
-        meets_latency_requirement: true,
-        meets_error_rate_requirement: true,
-        current_eps: 2500.0,
-        current_latency_ms: 15.0,
-        current_error_rate: 0.1,
-        recommendations: vec![
-            "EPS too low, consider optimization".to_string(),
-            "Latency is good".to_string(),
-        ],
-    };
-
-    let formatted = validation.format();
-    assert!(formatted.contains("❌ FAIL")); // Should show fail
-    assert!(formatted.contains("2500.00")); // Current EPS
-    assert!(formatted.contains("15.00")); // Current latency  
-    assert!(formatted.contains("0.10")); // Current error rate
-    assert!(formatted.contains("EPS too low")); // Recommendation
-    assert!(formatted.contains("Latency is good")); // Recommendation
-}
-
-#[test]
-fn test_performance_validation_all_pass() {
-    let validation = PerformanceValidation {
-        meets_eps_requirement: true,
-        meets_latency_requirement: true,
-        meets_error_rate_requirement: true,
-        current_eps: 5000.0,
-        current_latency_ms: 10.0,
-        current_error_rate: 0.01,
-        recommendations: vec!["All requirements met".to_string()],
-    };
-
-    assert!(validation.all_requirements_met());
-
-    let formatted = validation.format();
-    assert!(formatted.contains("✅ PASS")); // Should show pass
-    assert!(formatted.contains("All requirements met"));
-}
-
-#[tokio::test]
-async fn test_eps_calculation() {
-    let metrics = AuditMetrics::new();
-
-    // Record events
-    for _ in 0..100 {
-        metrics.record_event_success(Duration::from_millis(1));
-    }
-
-    // Small delay to allow EPS calculation
-    tokio::time::sleep(Duration::from_millis(10)).await;
-
-    let eps = metrics.get_events_per_second().await;
-
-    // Should have some EPS value > 0
-    assert!(eps > 0.0, "EPS should be greater than 0");
-
-    // EPS should be reasonable (events / time)
-    // With 100 events in ~10ms, should be very high
-    assert!(eps > 1000.0, "EPS should be high for short time period");
-}
-
-#[test]
-fn test_error_rate_calculation() {
-    let metrics = AuditMetrics::new();
-
-    // No events - should be 0% error rate
-    assert_eq!(metrics.get_error_rate(), 0.0);
-
-    // Record 7 successes, 3 failures = 30% error rate
-    for _ in 0..7 {
-        metrics.record_event_success(Duration::from_millis(1));
-    }
-    for _ in 0..3 {
-        metrics.record_event_failure(Duration::from_millis(1));
-    }
-
-    let error_rate = metrics.get_error_rate();
-    assert_eq!(error_rate, 30.0);
-}
-
-#[test]
-fn test_target_success_rate_calculation() {
-    let metrics = AuditMetrics::new();
-
-    // No operations - should be 100% success rate
-    assert_eq!(metrics.get_target_success_rate(), 100.0);
-
-    // Record 8 successes, 2 failures = 80% success rate
-    for _ in 0..8 {
-        metrics.record_target_success();
-    }
-    for _ in 0..2 {
-        metrics.record_target_failure();
-    }
-
-    let success_rate = metrics.get_target_success_rate();
-    assert_eq!(success_rate, 80.0);
-}
-
-#[tokio::test]
-async fn test_metrics_reset() {
-    let metrics = AuditMetrics::new();
-
-    // Record some data
-    metrics.record_event_success(Duration::from_millis(10));
-    metrics.record_target_success();
-    metrics.record_config_reload();
-    metrics.record_system_start();
-
-    // Verify data exists
-    let report_before = metrics.generate_report().await;
-    assert!(report_before.total_events_processed > 0);
-    assert!(report_before.config_reload_count > 0);
-    assert!(report_before.system_start_count > 0);
-
-    // Reset
-    metrics.reset().await;
-
-    // Verify data is reset
-    let report_after = metrics.generate_report().await;
-    assert_eq!(report_after.total_events_processed, 0);
-    assert_eq!(report_after.total_events_failed, 0);
-    // Note: config_reload_count and system_start_count are reset to 0 as well
-    assert_eq!(report_after.config_reload_count, 0);
-    assert_eq!(report_after.system_start_count, 0);
-}
@@ -1,320 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-//! Performance and observability tests for audit system
-
-use rustfs_audit::*;
-use std::sync::Arc;
-use std::time::{Duration, Instant};
-use tokio::time::timeout;
-
-#[tokio::test]
-async fn test_audit_system_startup_performance() {
-    // Test that audit system starts within reasonable time
-    let system = AuditSystem::new();
-    let start = Instant::now();
-
-    // Create minimal config for testing
-    let config = rustfs_ecstore::config::Config(std::collections::HashMap::new());
-
-    // System should start quickly even with empty config
-    let _result = timeout(Duration::from_secs(5), system.start(config)).await;
-    let elapsed = start.elapsed();
-
-    println!("Audit system startup took: {elapsed:?}");
-
-    // Should complete within 5 seconds
-    assert!(elapsed < Duration::from_secs(5), "Startup took too long: {elapsed:?}");
-
-    // Clean up
-    let _ = system.close().await;
-}
-
-#[tokio::test]
-async fn test_concurrent_target_creation() {
-    // Test that multiple targets can be created concurrently
-    let registry = AuditRegistry::new();
-
-    // Create config with multiple webhook instances
-    let mut config = rustfs_ecstore::config::Config(std::collections::HashMap::new());
-    let mut webhook_section = std::collections::HashMap::new();
-
-    // Create multiple instances for concurrent creation test
-    for i in 1..=5 {
-        let mut kvs = rustfs_ecstore::config::KVS::new();
-        kvs.insert("enable".to_string(), "on".to_string());
-        kvs.insert("endpoint".to_string(), format!("http://localhost:302{i}/webhook"));
-        webhook_section.insert(format!("instance_{i}"), kvs);
-    }
-
-    config.0.insert("audit_webhook".to_string(), webhook_section);
-
-    let start = Instant::now();
-
-    // This will fail due to server storage not being initialized, but we can measure timing
-    let result = registry.create_audit_targets_from_config(&config).await;
-    let elapsed = start.elapsed();
-
-    println!("Concurrent target creation took: {elapsed:?}");
-
-    // Should complete quickly even with multiple targets
-    assert!(elapsed < Duration::from_secs(10), "Target creation took too long: {elapsed:?}");
-
-    // Verify it fails with expected error (server not initialized)
-    match result {
-        Err(AuditError::StorageNotAvailable(_)) => {
-            // Expected in test environment
-        }
-        Err(e) => {
-            println!("Unexpected error during concurrent creation: {e}");
-        }
-        Ok(_) => {
-            println!("Unexpected success in test environment");
-        }
-    }
-}
-
-#[tokio::test]
-async fn test_audit_log_dispatch_performance() {
-    let system = AuditSystem::new();
-
-    // Create minimal config
-    let config = rustfs_ecstore::config::Config(HashMap::new());
-    let start_result = system.start(config).await;
-    if start_result.is_err() {
-        println!("AuditSystem failed to start: {start_result:?}");
-        return; // Alternatively: assert!(false, "AuditSystem failed to start");
-    }
-
-    use chrono::Utc;
-    use rustfs_targets::EventName;
-    use serde_json::json;
-    use std::collections::HashMap;
-    let id = 1;
-
-    let mut req_header = hashbrown::HashMap::new();
-    req_header.insert("authorization".to_string(), format!("Bearer test-token-{id}"));
-    req_header.insert("content-type".to_string(), "application/octet-stream".to_string());
-
-    let mut resp_header = hashbrown::HashMap::new();
-    resp_header.insert("x-response".to_string(), "ok".to_string());
-
-    let mut tags = hashbrown::HashMap::new();
-    tags.insert(format!("tag-{id}"), json!("sample"));
-
-    let mut req_query = hashbrown::HashMap::new();
-    req_query.insert("id".to_string(), id.to_string());
-
-    let api_details = ApiDetails {
-        name: Some("PutObject".to_string()),
-        bucket: Some("test-bucket".to_string()),
-        object: Some(format!("test-object-{id}")),
-        status: Some("success".to_string()),
-        status_code: Some(200),
-        input_bytes: Some(1024),
-        output_bytes: Some(0),
-        header_bytes: Some(128),
-        time_to_first_byte: Some("1ms".to_string()),
-        time_to_first_byte_in_ns: Some("1000000".to_string()),
-        time_to_response: Some("2ms".to_string()),
-        time_to_response_in_ns: Some("2000000".to_string()),
-        ..Default::default()
-    };
-    // Create sample audit log entry
-    let audit_entry = AuditEntry {
-        version: "1".to_string(),
-        deployment_id: Some(format!("test-deployment-{id}")),
-        site_name: Some("test-site".to_string()),
-        time: Utc::now(),
-        event: EventName::ObjectCreatedPut,
-        entry_type: Some("object".to_string()),
-        trigger: "api".to_string(),
-        api: api_details,
-        remote_host: Some("127.0.0.1".to_string()),
-        request_id: Some(format!("test-request-{id}")),
-        user_agent: Some("test-agent".to_string()),
-        req_path: Some(format!("/test-bucket/test-object-{id}")),
-        req_host: Some("test-host".to_string()),
-        req_node: Some("node-1".to_string()),
-        req_claims: None,
-        req_query: Some(req_query),
-        req_header: Some(req_header),
-        resp_header: Some(resp_header),
-        tags: Some(tags),
-        access_key: Some(format!("AKIA{id}")),
-        parent_user: Some(format!("parent-{id}")),
-        error: None,
-    };
-
-    let start = Instant::now();
-
-    // Dispatch audit log (should be fast since no targets are configured)
-    let result = system.dispatch(Arc::new(audit_entry)).await;
-    let elapsed = start.elapsed();
-
-    println!("Audit log dispatch took: {elapsed:?}");
-
-    // Should be very fast (sub-millisecond for no targets)
-    assert!(elapsed < Duration::from_millis(100), "Dispatch took too long: {elapsed:?}");
-
-    // Should succeed even with no targets
-    assert!(result.is_ok(), "Dispatch should succeed with no targets");
-
-    // Clean up
-    let _ = system.close().await;
-}
-
-#[tokio::test]
-async fn test_system_state_transitions() {
-    let system = AuditSystem::new();
-
-    // Initial state should be stopped
-    assert_eq!(system.get_state().await, rustfs_audit::system::AuditSystemState::Stopped);
-
-    // Start system
-    let config = rustfs_ecstore::config::Config(std::collections::HashMap::new());
-    let start_result = system.start(config).await;
-
-    // Should be running (or failed due to server storage)
-    let state = system.get_state().await;
-    match start_result {
-        Ok(_) => {
-            assert_eq!(state, rustfs_audit::system::AuditSystemState::Running);
-        }
-        Err(_) => {
-            // Expected in test environment due to server storage not being initialized
-            assert_eq!(state, rustfs_audit::system::AuditSystemState::Stopped);
-        }
-    }
-
-    // Clean up
-    let _ = system.close().await;
-    assert_eq!(system.get_state().await, rustfs_audit::system::AuditSystemState::Stopped);
-}
-
-#[test]
-fn test_event_name_mask_performance() {
-    use rustfs_targets::EventName;
-
-    // Test that event name mask calculation is efficient
-    let events = vec![
-        EventName::ObjectCreatedPut,
-        EventName::ObjectAccessedGet,
-        EventName::ObjectRemovedDelete,
-        EventName::ObjectCreatedAll,
-        EventName::Everything,
-    ];
-
-    let start = Instant::now();
-
-    // Calculate masks for many events
-    for _ in 0..1000 {
-        for event in &events {
-            let _mask = event.mask();
-        }
-    }
-
-    let elapsed = start.elapsed();
-    println!("Event mask calculation (5000 ops) took: {elapsed:?}");
-
-    // Should be very fast
-    assert!(elapsed < Duration::from_millis(100), "Mask calculation too slow: {elapsed:?}");
-}
-
-#[test]
-fn test_event_name_expansion_performance() {
-    use rustfs_targets::EventName;
-
-    // Test that event name expansion is efficient
-    let compound_events = vec![
-        EventName::ObjectCreatedAll,
-        EventName::ObjectAccessedAll,
-        EventName::ObjectRemovedAll,
-        EventName::Everything,
-    ];
-
-    let start = Instant::now();
-
-    // Expand events many times
-    for _ in 0..1000 {
-        for event in &compound_events {
-            let _expanded = event.expand();
-        }
-    }
-
-    let elapsed = start.elapsed();
-    println!("Event expansion (4000 ops) took: {elapsed:?}");
-
-    // Should be very fast
-    assert!(elapsed < Duration::from_millis(100), "Expansion too slow: {elapsed:?}");
-}
-
-#[tokio::test]
-async fn test_registry_operations_performance() {
-    let registry = AuditRegistry::new();
-
-    let start = Instant::now();
-
-    // Test basic registry operations
-    for _ in 0..1000 {
-        let targets = registry.list_targets();
-        let _target = registry.get_target("nonexistent");
-        assert!(targets.is_empty());
-    }
-
-    let elapsed = start.elapsed();
-    println!("Registry operations (2000 ops) took: {elapsed:?}");
-
-    // Should be very fast for empty registry
-    assert!(elapsed < Duration::from_millis(100), "Registry ops too slow: {elapsed:?}");
-}
-
-// Performance requirements validation
-#[test]
-fn test_performance_requirements() {
-    // According to requirements: ≥ 3k EPS/node; P99 < 30ms (default)
-
-    // These are synthetic tests since we can't actually achieve 3k EPS
-    // without real server storage and network targets, but we can validate
-    // that our core algorithms are efficient enough
-
-    let start = Instant::now();
-
-    // Simulate processing 3000 events worth of operations
-    for i in 0..3000 {
-        // Simulate event name parsing and processing
-        let _event_id = format!("s3:ObjectCreated:Put_{i}");
-        let _timestamp = chrono::Utc::now().to_rfc3339();
-
-        // Simulate basic audit entry creation overhead
-        let _entry_size = 512; // bytes
-        let _processing_time = std::time::Duration::from_nanos(100); // simulated
-    }
-
-    let elapsed = start.elapsed();
-    let eps = 3000.0 / elapsed.as_secs_f64();
-
-    println!("Simulated 3000 events in {elapsed:?} ({eps:.0} EPS)");
-
-    // Our core processing should easily handle 3k EPS worth of CPU overhead
-    // The actual EPS limit will be determined by network I/O to targets
-    assert!(eps > 10000.0, "Core processing too slow for 3k EPS target: {eps} EPS");
-
-    // P99 latency requirement: < 30ms
-    // For core processing, we should be much faster than this
-    let avg_latency = elapsed / 3000;
-    println!("Average processing latency: {avg_latency:?}");
-
-    assert!(avg_latency < Duration::from_millis(1), "Processing latency too high: {avg_latency:?}");
-}
@@ -1,330 +0,0 @@
-//  Copyright 2024 RustFS Team
-//
-//  Licensed under the Apache License, Version 2.0 (the "License");
-//  you may not use this file except in compliance with the License.
-//  You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-//  Unless required by applicable law or agreed to in writing, software
-//  distributed under the License is distributed on an "AS IS" BASIS,
-//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-//  See the License for the specific language governing permissions and
-//  limitations under the License.
-
-//! Comprehensive integration tests for the complete audit system
-
-use rustfs_audit::*;
-use rustfs_ecstore::config::{Config, KVS};
-use std::collections::HashMap;
-use std::sync::Arc;
-use std::time::Duration;
-
-#[tokio::test]
-async fn test_complete_audit_system_lifecycle() {
-    // Test the complete lifecycle of the audit system
-    let system = AuditSystem::new();
-
-    // 1. Initial state should be stopped
-    assert_eq!(system.get_state().await, system::AuditSystemState::Stopped);
-    assert!(!system.is_running().await);
-
-    // 2. Start with empty config (will fail due to no server storage in test)
-    let config = Config(HashMap::new());
-    let start_result = system.start(config).await;
-
-    // Should fail in test environment but state handling should work
-    match start_result {
-        Err(AuditError::StorageNotAvailable(_)) => {
-            // Expected in test environment
-            assert_eq!(system.get_state().await, system::AuditSystemState::Stopped);
-        }
-        Ok(_) => {
-            // If it somehow succeeds, verify running state
-            assert_eq!(system.get_state().await, system::AuditSystemState::Running);
-            assert!(system.is_running().await);
-
-            // Test pause/resume
-            system.pause().await.expect("Should pause successfully");
-            assert_eq!(system.get_state().await, system::AuditSystemState::Paused);
-
-            system.resume().await.expect("Should resume successfully");
-            assert_eq!(system.get_state().await, system::AuditSystemState::Running);
-        }
-        Err(e) => {
-            panic!("Unexpected error: {e}");
-        }
-    }
-
-    // 3. Test close
-    system.close().await.expect("Should close successfully");
-    assert_eq!(system.get_state().await, system::AuditSystemState::Stopped);
-    assert!(!system.is_running().await);
-}
-
-#[tokio::test]
-async fn test_audit_system_with_metrics() {
-    let system = AuditSystem::new();
-
-    // Reset metrics for clean test
-    system.reset_metrics().await;
-
-    // Try to start system (will fail but should record metrics)
-    let config = Config(HashMap::new());
-    let _ = system.start(config).await; // Ignore result
-
-    // Check metrics
-    let metrics = system.get_metrics().await;
-    assert!(metrics.system_start_count > 0, "Should have recorded system start attempt");
-
-    // Test performance validation
-    let validation = system.validate_performance().await;
-    assert!(validation.current_eps >= 0.0);
-    assert!(validation.current_latency_ms >= 0.0);
-    assert!(validation.current_error_rate >= 0.0);
-}
-
-#[tokio::test]
-async fn test_audit_log_dispatch_with_no_targets() {
-    let system = AuditSystem::new();
-
-    // Create sample audit entry
-    let audit_entry = create_sample_audit_entry();
-
-    // Try to dispatch with no targets (should succeed but do nothing)
-    let result = system.dispatch(Arc::new(audit_entry)).await;
-
-    // Should succeed even with no targets configured
-    match result {
-        Ok(_) => {
-            // Success expected
-        }
-        Err(AuditError::NotInitialized(_)) => {
-            // Also acceptable since system not running
-        }
-        Err(e) => {
-            panic!("Unexpected error: {e}");
-        }
-    }
-}
-
-#[tokio::test]
-async fn test_global_audit_functions() {
-    use rustfs_audit::*;
-
-    // Test global functions
-    let system = init_audit_system();
-    assert!(system.get_state().await == system::AuditSystemState::Stopped);
-
-    // Test audit logging function (should not panic even if system not running)
-    let entry = create_sample_audit_entry();
-    let result = dispatch_audit_log(Arc::new(entry)).await;
-    assert!(result.is_ok(), "Dispatch should succeed even with no running system");
-
-    // Test system status
-    assert!(!is_audit_system_running().await);
-
-    // Test AuditLogger singleton
-    let _logger = AuditLogger::instance();
-    assert!(!AuditLogger::is_enabled().await);
-
-    // Test logging (should not panic)
-    let entry = create_sample_audit_entry();
-    AuditLogger::log(entry).await; // Should not panic
-}
-
-#[tokio::test]
-async fn test_config_parsing_with_multiple_instances() {
-    let registry = AuditRegistry::new();
-
-    // Create config with multiple webhook instances
-    let mut config = Config(HashMap::new());
-    let mut webhook_section = HashMap::new();
-
-    // Default instance
-    let mut default_kvs = KVS::new();
-    default_kvs.insert("enable".to_string(), "off".to_string());
-    default_kvs.insert("endpoint".to_string(), "http://default.example.com/audit".to_string());
-    webhook_section.insert("_".to_string(), default_kvs);
-
-    // Primary instance
-    let mut primary_kvs = KVS::new();
-    primary_kvs.insert("enable".to_string(), "on".to_string());
-    primary_kvs.insert("endpoint".to_string(), "http://primary.example.com/audit".to_string());
-    primary_kvs.insert("auth_token".to_string(), "primary-token-123".to_string());
-    webhook_section.insert("primary".to_string(), primary_kvs);
-
-    // Secondary instance
-    let mut secondary_kvs = KVS::new();
-    secondary_kvs.insert("enable".to_string(), "on".to_string());
-    secondary_kvs.insert("endpoint".to_string(), "http://secondary.example.com/audit".to_string());
-    secondary_kvs.insert("auth_token".to_string(), "secondary-token-456".to_string());
-    webhook_section.insert("secondary".to_string(), secondary_kvs);
-
-    config.0.insert("audit_webhook".to_string(), webhook_section);
-
-    // Try to create targets from config
-    let result = registry.create_audit_targets_from_config(&config).await;
-
-    // Should fail due to server storage not initialized, but parsing should work
-    match result {
-        Err(AuditError::StorageNotAvailable(_)) => {
-            // Expected - parsing worked but save failed
-        }
-        Err(e) => {
-            println!("Config parsing error: {e}");
-            // Other errors might indicate parsing issues, but not necessarily failures
-        }
-        Ok(_) => {
-            // Unexpected success in test environment
-            println!("Unexpected success - server storage somehow available");
-        }
-    }
-}
-
-#[test]
-fn test_target_type_validation() {
-    use rustfs_targets::target::TargetType;
-
-    // Test that TargetType::AuditLog is properly defined
-    let audit_type = TargetType::AuditLog;
-    assert_eq!(audit_type.as_str(), "audit_log");
-
-    let notify_type = TargetType::NotifyEvent;
-    assert_eq!(notify_type.as_str(), "notify_event");
-
-    // Test that they are different
-    assert_ne!(audit_type.as_str(), notify_type.as_str());
-}
-
-#[tokio::test]
-async fn test_concurrent_operations() {
-    let system = AuditSystem::new();
-
-    // Test concurrent state checks
-    let mut tasks = Vec::new();
-
-    for i in 0..10 {
-        let system_clone = system.clone();
-        let task = tokio::spawn(async move {
-            let state = system_clone.get_state().await;
-            let is_running = system_clone.is_running().await;
-            (i, state, is_running)
-        });
-        tasks.push(task);
-    }
-
-    // All tasks should complete without panic
-    for task in tasks {
-        let (i, state, is_running) = task.await.expect("Task should complete");
-        assert_eq!(state, system::AuditSystemState::Stopped);
-        assert!(!is_running);
-        println!("Task {i} completed successfully");
-    }
-}
-
-#[tokio::test]
-async fn test_performance_under_load() {
-    use std::time::Instant;
-
-    let system = AuditSystem::new();
-
-    // Test multiple rapid dispatch calls
-    let start = Instant::now();
-    let mut tasks = Vec::new();
-
-    for i in 0..100 {
-        let system_clone = system.clone();
-        let entry = Arc::new(create_sample_audit_entry_with_id(i));
-
-        let task = tokio::spawn(async move { system_clone.dispatch(entry).await });
-        tasks.push(task);
-    }
-
-    // Wait for all dispatches to complete
-    let mut success_count = 0;
-    let mut error_count = 0;
-
-    for task in tasks {
-        match task.await.expect("Task should complete") {
-            Ok(_) => success_count += 1,
-            Err(_) => error_count += 1,
-        }
-    }
-
-    let elapsed = start.elapsed();
-    println!("100 concurrent dispatches took: {elapsed:?}");
-    println!("Successes: {success_count}, Errors: {error_count}");
-
-    // Should complete reasonably quickly
-    assert!(elapsed < Duration::from_secs(5), "Concurrent operations took too long");
-
-    // All should either succeed (if targets available) or fail consistently
-    assert_eq!(success_count + error_count, 100);
-}
-
-// Helper functions
-
-fn create_sample_audit_entry() -> AuditEntry {
-    create_sample_audit_entry_with_id(0)
-}
-
-fn create_sample_audit_entry_with_id(id: u32) -> AuditEntry {
-    use chrono::Utc;
-    use rustfs_targets::EventName;
-    use serde_json::json;
-
-    let mut req_header = hashbrown::HashMap::new();
-    req_header.insert("authorization".to_string(), format!("Bearer test-token-{id}"));
-    req_header.insert("content-type".to_string(), "application/octet-stream".to_string());
-
-    let mut resp_header = hashbrown::HashMap::new();
-    resp_header.insert("x-response".to_string(), "ok".to_string());
-
-    let mut tags = hashbrown::HashMap::new();
-    tags.insert(format!("tag-{id}"), json!("sample"));
-
-    let mut req_query = hashbrown::HashMap::new();
-    req_query.insert("id".to_string(), id.to_string());
-
-    let api_details = ApiDetails {
-        name: Some("PutObject".to_string()),
-        bucket: Some("test-bucket".to_string()),
-        object: Some(format!("test-object-{id}")),
-        status: Some("success".to_string()),
-        status_code: Some(200),
-        input_bytes: Some(1024),
-        output_bytes: Some(0),
-        header_bytes: Some(128),
-        time_to_first_byte: Some("1ms".to_string()),
-        time_to_first_byte_in_ns: Some("1000000".to_string()),
-        time_to_response: Some("2ms".to_string()),
-        time_to_response_in_ns: Some("2000000".to_string()),
-        ..Default::default()
-    };
-
-    AuditEntry {
-        version: "1".to_string(),
-        deployment_id: Some(format!("test-deployment-{id}")),
-        site_name: Some("test-site".to_string()),
-        time: Utc::now(),
-        event: EventName::ObjectCreatedPut,
-        entry_type: Some("object".to_string()),
-        trigger: "api".to_string(),
-        api: api_details,
-        remote_host: Some("127.0.0.1".to_string()),
-        request_id: Some(format!("test-request-{id}")),
-        user_agent: Some("test-agent".to_string()),
-        req_path: Some(format!("/test-bucket/test-object-{id}")),
-        req_host: Some("test-host".to_string()),
-        req_node: Some("node-1".to_string()),
-        req_claims: None,
-        req_query: Some(req_query),
-        req_header: Some(req_header),
-        resp_header: Some(resp_header),
-        tags: Some(tags),
-        access_key: Some(format!("AKIA{id}")),
-        parent_user: Some(format!("parent-{id}")),
-        error: None,
-    }
-}
@@ -1,38 +0,0 @@
-# Copyright 2024 RustFS Team
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-[package]
-name = "rustfs-checksums"
-edition.workspace = true
-license.workspace = true
-repository.workspace = true
-rust-version.workspace = true
-version.workspace = true
-homepage.workspace = true
-description = "Checksum calculation and verification callbacks for HTTP request and response bodies sent by service clients generated by RustFS, ensuring data integrity and authenticity."
-keywords = ["checksum-calculation", "verification", "integrity", "authenticity", "rustfs"]
-categories = ["web-programming", "development-tools", "network-programming"]
-documentation = "https://docs.rs/rustfs-signer/latest/rustfs_checksum/"
-
-[dependencies]
-bytes = { workspace = true }
-crc-fast = { workspace = true }
-http = { workspace = true }
-base64-simd = { workspace = true }
-md-5 = { workspace = true }
-sha1 = { workspace = true }
-sha2 = { workspace = true }
-
-[dev-dependencies]
-pretty_assertions = { workspace = true }
@@ -1,3 +0,0 @@
-# rustfs-checksums
-
-Checksum calculation and verification callbacks for HTTP request and response bodies sent by service clients generated by RustFS object storage.
@@ -1,44 +0,0 @@
-// Copyright 2024 RustFS Team
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-#![allow(dead_code)]
-
-use base64_simd::STANDARD;
-use std::error::Error;
-
-#[derive(Debug)]
-pub(crate) struct DecodeError(base64_simd::Error);
-
-impl Error for DecodeError {
-    fn source(&self) -> Option<&(dyn Error + 'static)> {
-        Some(&self.0)
-    }
-}
-
-impl std::fmt::Display for DecodeError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        write!(f, "failed to decode base64")
-    }
-}
-
-pub(crate) fn decode(input: impl AsRef<str>) -> Result<Vec<u8>, DecodeError> {
-    STANDARD.decode_to_vec(input.as_ref()).map_err(DecodeError)
-}
-
-pub(crate) fn encode(input: impl AsRef<[u8]>) -> String {
-    STANDARD.encode_to_string(input.as_ref())
-}
-
-pub(crate) fn encoded_length(length: usize) -> usize {
-    STANDARD.encoded_length(length)
-}
@@ -1,45 +0,0 @@
-// Copyright 2024 RustFS Team
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-use std::error::Error;
-use std::fmt;
-
-#[derive(Debug)]
-pub struct UnknownChecksumAlgorithmError {
-    checksum_algorithm: String,
-}
-
-impl UnknownChecksumAlgorithmError {
-    pub(crate) fn new(checksum_algorithm: impl Into<String>) -> Self {
-        Self {
-            checksum_algorithm: checksum_algorithm.into(),
-        }
-    }
-
-    pub fn checksum_algorithm(&self) -> &str {
-        &self.checksum_algorithm
-    }
-}
-
-impl fmt::Display for UnknownChecksumAlgorithmError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(
-            f,
-            r#"unknown checksum algorithm "{}", please pass a known algorithm name ("crc32", "crc32c", "sha1", "sha256", "md5")"#,
-            self.checksum_algorithm
-        )
-    }
-}
-
-impl Error for UnknownChecksumAlgorithmError {}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
github-actions[bot]	c43ed581d2	chore: update star history	2026-07-29 04:21:42 +00:00
github-actions[bot]	686d0e8df7	chore: update star history	2026-07-28 04:20:51 +00:00
github-actions[bot]	d0193a9407	chore: update star history	2026-07-27 04:28:05 +00:00
github-actions[bot]	5a1b4bbd45	chore: update star history	2026-07-26 04:24:45 +00:00
github-actions[bot]	70c4282a5f	chore: update star history	2026-07-25 04:21:07 +00:00
github-actions[bot]	03fc8e81cc	chore: update star history	2026-07-24 04:22:29 +00:00
github-actions[bot]	aa537f8a7b	chore: update star history	2026-07-23 04:22:49 +00:00
github-actions[bot]	cf3d4d663e	chore: update star history	2026-07-22 04:23:13 +00:00
github-actions[bot]	c0d454e6b7	chore: update star history	2026-07-21 04:22:23 +00:00
github-actions[bot]	31fbde559c	chore: update star history	2026-07-20 04:28:07 +00:00
github-actions[bot]	8cf5d6906d	chore: update star history	2026-07-19 04:24:01 +00:00
github-actions[bot]	125ac23907	chore: update star history	2026-07-19 02:23:45 +00:00
github-actions[bot]	e72cdfe581	chore: update star history	2026-07-18 09:50:15 +00:00
Zhengchao An	af5a5f847e	chore: update repository visuals	2026-07-18 17:21:35 +08:00
github-actions[bot]	0a9ecc3cbf	chore: update star history	2026-07-18 08:50:41 +00:00
Zhengchao An	75aab297ca	chore: update star history	2026-07-18 13:17:05 +08:00
Zhengchao An	4571fd76ad	chore: initialize star history	2026-07-18 12:48:47 +08:00