dig-dht 0.5.1

Kademlia DHT with provider records for the DIG Node peer network — maps DIG content (store / capsule / root / resource) to the peer_ids holding it, so a node can locate which peers have the content it wants and fetch it over the L7 peer RPC. peer_id = SHA-256(TLS SPKI DER), XOR-distance k-buckets, iterative find_node/find_providers, TTL'd + republished provider records, riding dig-nat mTLS transport.
Documentation
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always

jobs:
  test:
    name: Format / Clippy / Test / Docs
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable
          components: rustfmt, clippy

      - name: Cache dependencies
        uses: Swatinem/rust-cache@v2

      - name: Install cargo-nextest
        uses: taiki-e/install-action@nextest

      - name: Check formatting
        run: cargo fmt --all --check

      - name: Check clippy
        run: cargo clippy --locked --all-targets -- -D warnings

      # nextest natively detects+reports flaky tests (a test that fails then passes on retry is
      # flagged FLAKY in the run summary, not silently hidden) — #489.
      - name: Run tests (nextest, retries flaky tests)
        run: cargo nextest run --locked --all --retries 2

      - name: Build (release)
        run: cargo build --locked --release

      - name: Check documentation
        run: cargo doc --locked --no-deps

  coverage:
    name: Coverage (>=80% lines)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable
          components: llvm-tools-preview

      - name: Cache dependencies
        uses: Swatinem/rust-cache@v2

      - name: Install cargo-llvm-cov
        uses: taiki-e/install-action@cargo-llvm-cov

      - name: Install cargo-nextest
        uses: taiki-e/install-action@nextest

      # Unit + integration (swarm) coverage, CI-gated at >=80% lines (ecosystem standard #157). The
      # whole DHT — k-buckets, iterative lookup, provider store + TTL/republish, the wire, and the
      # service RPCs — is exercised over the in-memory swarm harness (many virtual nodes in one
      # process, NO real network), so every module is counted. No file is excluded from the gate.
      # Runs via nextest so a flaky test (fail-then-pass) is retried + reported, not silently
      # counted as a plain failure (#489).
      - name: Run tests with coverage (gate >=80% lines)
        run: >-
          cargo llvm-cov nextest --locked --all --retries 2
          --fail-under-lines 80
          --lcov --output-path lcov.info

      - name: Upload coverage report
        uses: actions/upload-artifact@v4
        with:
          name: lcov-coverage
          path: lcov.info
          if-no-files-found: error