hanna/fabrica

build: initialize workspace and nix flake

58e3d63 · hanna committed on 2026-07-25

Phase 1 scaffold: a Cargo workspace with the root `fabrica` binary and eleven
empty in-tree crates (config, store, model, git, highlight, auth, mail, ssh,
web, api, cli), wired with the enforced one-way dependency direction.

- flake.nix (flake-parts + fenix nightly + crane) exposing packages.{default,
  fabrica,container}, checks.{clippy,fmt,test,deny,doc}, a dev shell, and a
  formatter; the binary is wrapped with git on PATH.
- rust-toolchain.toml (nightly, for non-Nix users), edition 2024, resolver 3.
- Workspace lints: forbid unsafe_code; deny clippy::all/unwrap_used/panic/todo.
- justfile `check` runs the four-command quality gate.
- MPL-2.0 LICENSE with per-file headers; deny.toml; seeded docs/decisions.md.

`nix flake check` is green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Signed by hannaSSH key fingerprint: SHA256:4g9cWhkAAw8gwqhJUcVbSnGEvdGwklW+1Aa/fMUu59k

.gitignore +8 −0

Cargo.lock +54 −0

Cargo.toml +65 −0

LICENSE +373 −0

crates/api/Cargo.toml +15 −0

crates/api/src/lib.rs +5 −0

crates/auth/Cargo.toml +15 −0

crates/auth/src/lib.rs +5 −0

crates/cli/Cargo.toml +15 −0

crates/cli/src/lib.rs +20 −0

crates/config/Cargo.toml +15 −0

crates/config/src/lib.rs +5 −0

crates/git/Cargo.toml +15 −0

crates/git/src/lib.rs +5 −0

crates/highlight/Cargo.toml +15 −0

crates/highlight/src/lib.rs +5 −0

crates/mail/Cargo.toml +15 −0

crates/mail/src/lib.rs +5 −0

crates/model/Cargo.toml +15 −0

crates/model/src/lib.rs +5 −0

crates/ssh/Cargo.toml +15 −0

crates/ssh/src/lib.rs +5 −0

crates/store/Cargo.toml +15 −0

crates/store/src/lib.rs +5 −0

crates/web/Cargo.toml +15 −0

crates/web/src/lib.rs +5 −0

deny.toml +37 −0

docs/decisions.md +87 −0

flake.lock +116 −0

flake.nix +155 −0

justfile +33 −0

rust-toolchain.toml +6 −0

src/main.rs +14 −0

+/target
+result
+result-*
+.direnv/
+*.db
+*.db-wal
+*.db-shm
+.env

+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+[[package]]
+name = "api"
+version = "0.1.0"
+[[package]]
+name = "auth"
+version = "0.1.0"
+[[package]]
+name = "cli"
+version = "0.1.0"
+[[package]]
+name = "config"
+version = "0.1.0"
+[[package]]
+name = "fabrica"
+version = "0.1.0"
+dependencies = [
+ "cli",
+]
+[[package]]
+name = "git"
+version = "0.1.0"
+[[package]]
+name = "highlight"
+version = "0.1.0"
+[[package]]
+name = "mail"
+version = "0.1.0"
+[[package]]
+name = "model"
+version = "0.1.0"
+[[package]]
+name = "ssh"
+version = "0.1.0"
+[[package]]
+name = "store"
+version = "0.1.0"
+[[package]]
+name = "web"
+version = "0.1.0"

+[package]
+name = "fabrica"
+description = "A self-hosted git server: a single binary serving repos over HTTPS and SSH with a themeable web UI."
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+authors.workspace = true
+repository.workspace = true
+publish.workspace = true
+[[bin]]
+name = "fabrica"
+path = "src/main.rs"
+[dependencies]
+cli = { path = "crates/cli" }
+[lints]
+workspace = true
+[workspace]
+members = ["crates/*"]
+resolver = "3"
+[workspace.package]
+version = "0.1.0"
+edition = "2024"
+rust-version = "1.85"
+license = "MPL-2.0"
+authors = ["fabrica contributors"]
+repository = "https://git.example.com/fabrica"
+publish = false
+[workspace.dependencies]
+# In-tree crates. Dependency direction is strictly one-way and enforced:
+#   model  <-  store / git / auth  <-  web / api / ssh / cli
+# No crate may depend on `web`; `model` depends on nothing in-tree.
+config = { path = "crates/config" }
+store = { path = "crates/store" }
+model = { path = "crates/model" }
+git = { path = "crates/git" }
+highlight = { path = "crates/highlight" }
+auth = { path = "crates/auth" }
+mail = { path = "crates/mail" }
+ssh = { path = "crates/ssh" }
+web = { path = "crates/web" }
+api = { path = "crates/api" }
+cli = { path = "crates/cli" }
+[workspace.lints.rust]
+unsafe_code = "forbid"
+missing_docs = "warn"
+[workspace.lints.clippy]
+all = { level = "deny", priority = -1 }
+pedantic = { level = "warn", priority = -1 }
+unwrap_used = "deny"
+expect_used = "warn"
+panic = "deny"
+todo = "deny"
+[profile.release]
+strip = true
+lto = "thin"

+[package]
+name = "api"
+description = "JSON API served under /api/v1."
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+authors.workspace = true
+repository.workspace = true
+publish.workspace = true
+[dependencies]
+[lints]
+workspace = true

+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+//! The JSON API surface.

+Mozilla Public License Version 2.0
+==================================
+. Definitions
+--------------
+.1. "Contributor"
+    means each individual or legal entity that creates, contributes to
+    the creation of, or owns Covered Software.
+.2. "Contributor Version"
+    means the combination of the Contributions of others (if any) used
+    by a Contributor and that particular Contributor's Contribution.
+.3. "Contribution"
+    means Covered Software of a particular Contributor.
+.4. "Covered Software"
+    means Source Code Form to which the initial Contributor has attached
+    the notice in Exhibit A, the Executable Form of such Source Code
+    Form, and Modifications of such Source Code Form, in each case
+    including portions thereof.
+.5. "Incompatible With Secondary Licenses"
+    means
+    (a) that the initial Contributor has attached the notice described
+        in Exhibit B to the Covered Software; or
+    (b) that the Covered Software was made available under the terms of
+        version 1.1 or earlier of the License, but not also under the
+        terms of a Secondary License.
+.6. "Executable Form"
+    means any form of the work other than Source Code Form.
+.7. "Larger Work"
+    means a work that combines Covered Software with other material, in
+    a separate file or files, that is not Covered Software.
+.8. "License"
+    means this document.
+.9. "Licensable"
+    means having the right to grant, to the maximum extent possible,
+    whether at the time of the initial grant or subsequently, any and
+    all of the rights conveyed by this License.
+.10. "Modifications"
+    means any of the following:
+    (a) any file in Source Code Form that results from an addition to,
+        deletion from, or modification of the contents of Covered
+        Software; or
+    (b) any new file in Source Code Form that contains any Covered
+        Software.
+.11. "Patent Claims" of a Contributor
+    means any patent claim(s), including without limitation, method,
+    process, and apparatus claims, in any patent Licensable by such
+    Contributor that would be infringed, but for the grant of the
+    License, by the making, using, selling, offering for sale, having
+    made, import, or transfer of either its Contributions or its
+    Contributor Version.
+.12. "Secondary License"
+    means either the GNU General Public License, Version 2.0, the GNU
+    Lesser General Public License, Version 2.1, the GNU Affero General
+    Public License, Version 3.0, or any later versions of those
+    licenses.
+.13. "Source Code Form"
+    means the form of the work preferred for making modifications.
+.14. "You" (or "Your")
+    means an individual or a legal entity exercising rights under this
+    License. For legal entities, "You" includes any entity that
+    controls, is controlled by, or is under common control with You. For
+    purposes of this definition, "control" means (a) the power, direct
+    or indirect, to cause the direction or management of such entity,
+    whether by contract or otherwise, or (b) ownership of more than
+    fifty percent (50%) of the outstanding shares or beneficial
+    ownership of such entity.
+. License Grants and Conditions
+--------------------------------
+.1. Grants
+Each Contributor hereby grants You a world-wide, royalty-free,
+non-exclusive license:
+(a) under intellectual property rights (other than patent or trademark)
+    Licensable by such Contributor to use, reproduce, make available,
+    modify, display, perform, distribute, and otherwise exploit its
+    Contributions, either on an unmodified basis, with Modifications, or
+    as part of a Larger Work; and
+(b) under Patent Claims of such Contributor to make, use, sell, offer
+    for sale, have made, import, and otherwise transfer either its
+    Contributions or its Contributor Version.
+.2. Effective Date
+The licenses granted in Section 2.1 with respect to any Contribution
+become effective for each Contribution on the date the Contributor first
+distributes such Contribution.
+.3. Limitations on Grant Scope
+The licenses granted in this Section 2 are the only rights granted under
+this License. No additional rights or licenses will be implied from the
+distribution or licensing of Covered Software under this License.
+Notwithstanding Section 2.1(b) above, no patent license is granted by a
+Contributor:
+(a) for any code that a Contributor has removed from Covered Software;
+    or
+(b) for infringements caused by: (i) Your and any other third party's
+    modifications of Covered Software, or (ii) the combination of its
+    Contributions with other software (except as part of its Contributor
+    Version); or
+(c) under Patent Claims infringed by Covered Software in the absence of
+    its Contributions.
+This License does not grant any rights in the trademarks, service marks,
+or logos of any Contributor (except as may be necessary to comply with
+the notice requirements in Section 3.4).
+.4. Subsequent Licenses
+No Contributor makes additional grants as a result of Your choice to
+distribute the Covered Software under a subsequent version of this
+License (see Section 10.2) or under the terms of a Secondary License (if
+permitted under the terms of Section 3.3).
+.5. Representation
+Each Contributor represents that the Contributor believes its
+Contributions are its original creation(s) or it has sufficient rights
+to grant the rights to its Contributions conveyed by this License.
+.6. Fair Use
+This License is not intended to limit any rights You have under
+applicable copyright doctrines of fair use, fair dealing, or other
+equivalents.
+.7. Conditions
+Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
+in Section 2.1.
+. Responsibilities
+-------------------
+.1. Distribution of Source Form
+All distribution of Covered Software in Source Code Form, including any
+Modifications that You create or to which You contribute, must be under
+the terms of this License. You must inform recipients that the Source
+Code Form of the Covered Software is governed by the terms of this
+License, and how they can obtain a copy of this License. You may not
+attempt to alter or restrict the recipients' rights in the Source Code
+Form.
+.2. Distribution of Executable Form
+If You distribute Covered Software in Executable Form then:
+(a) such Covered Software must also be made available in Source Code
+    Form, as described in Section 3.1, and You must inform recipients of
+    the Executable Form how they can obtain a copy of such Source Code
+    Form by reasonable means in a timely manner, at a charge no more
+    than the cost of distribution to the recipient; and
+(b) You may distribute such Executable Form under the terms of this
+    License, or sublicense it under different terms, provided that the
+    license for the Executable Form does not attempt to limit or alter
+    the recipients' rights in the Source Code Form under this License.
+.3. Distribution of a Larger Work
+You may create and distribute a Larger Work under terms of Your choice,
+provided that You also comply with the requirements of this License for
+the Covered Software. If the Larger Work is a combination of Covered
+Software with a work governed by one or more Secondary Licenses, and the
+Covered Software is not Incompatible With Secondary Licenses, this
+License permits You to additionally distribute such Covered Software
+under the terms of such Secondary License(s), so that the recipient of
+the Larger Work may, at their option, further distribute the Covered
+Software under the terms of either this License or such Secondary
+License(s).
+.4. Notices
+You may not remove or alter the substance of any license notices
+(including copyright notices, patent notices, disclaimers of warranty,
+or limitations of liability) contained within the Source Code Form of
+the Covered Software, except that You may alter any license notices to
+the extent required to remedy known factual inaccuracies.
+.5. Application of Additional Terms
+You may choose to offer, and to charge a fee for, warranty, support,
+indemnity or liability obligations to one or more recipients of Covered
+Software. However, You may do so only on Your own behalf, and not on
+behalf of any Contributor. You must make it absolutely clear that any
+such warranty, support, indemnity, or liability obligation is offered by
+You alone, and You hereby agree to indemnify every Contributor for any
+liability incurred by such Contributor as a result of warranty, support,
+indemnity or liability terms You offer. You may include additional
+disclaimers of warranty and limitations of liability specific to any
+jurisdiction.
+. Inability to Comply Due to Statute or Regulation
+---------------------------------------------------
+If it is impossible for You to comply with any of the terms of this
+License with respect to some or all of the Covered Software due to
+statute, judicial order, or regulation then You must: (a) comply with
+the terms of this License to the maximum extent possible; and (b)
+describe the limitations and the code they affect. Such description must
+be placed in a text file included with all distributions of the Covered
+Software under this License. Except to the extent prohibited by statute
+or regulation, such description must be sufficiently detailed for a
+recipient of ordinary skill to be able to understand it.
+. Termination
+--------------
+.1. The rights granted under this License will terminate automatically
+if You fail to comply with any of its terms. However, if You become
+compliant, then the rights granted under this License from a particular
+Contributor are reinstated (a) provisionally, unless and until such
+Contributor explicitly and finally terminates Your grants, and (b) on an
+ongoing basis, if such Contributor fails to notify You of the
+non-compliance by some reasonable means prior to 60 days after You have
+come back into compliance. Moreover, Your grants from a particular
+Contributor are reinstated on an ongoing basis if such Contributor
+notifies You of the non-compliance by some reasonable means, this is the
+first time You have received notice of non-compliance with this License
+from such Contributor, and You become compliant prior to 30 days after
+Your receipt of the notice.
+.2. If You initiate litigation against any entity by asserting a patent
+infringement claim (excluding declaratory judgment actions,
+counter-claims, and cross-claims) alleging that a Contributor Version
+directly or indirectly infringes any patent, then the rights granted to
+You by any and all Contributors for the Covered Software under Section
+.1 of this License shall terminate.
+.3. In the event of termination under Sections 5.1 or 5.2 above, all
+end user license agreements (excluding distributors and resellers) which
+have been validly granted by You or Your distributors under this License
+prior to termination shall survive termination.
+************************************************************************
+*                                                                      *
+*  6. Disclaimer of Warranty                                           *
+*  -------------------------                                           *
+*                                                                      *
+*  Covered Software is provided under this License on an "as is"       *
+*  basis, without warranty of any kind, either expressed, implied, or  *
+*  statutory, including, without limitation, warranties that the       *
+*  Covered Software is free of defects, merchantable, fit for a        *
+*  particular purpose or non-infringing. The entire risk as to the     *
+*  quality and performance of the Covered Software is with You.        *
+*  Should any Covered Software prove defective in any respect, You     *
+*  (not any Contributor) assume the cost of any necessary servicing,   *
+*  repair, or correction. This disclaimer of warranty constitutes an   *
+*  essential part of this License. No use of any Covered Software is   *
+*  authorized under this License except under this disclaimer.         *
+*                                                                      *
+************************************************************************
+************************************************************************
+*                                                                      *
+*  7. Limitation of Liability                                          *
+*  --------------------------                                          *
+*                                                                      *
+*  Under no circumstances and under no legal theory, whether tort      *
+*  (including negligence), contract, or otherwise, shall any           *
+*  Contributor, or anyone who distributes Covered Software as          *
+*  permitted above, be liable to You for any direct, indirect,         *
+*  special, incidental, or consequential damages of any character      *
+*  including, without limitation, damages for lost profits, loss of    *
+*  goodwill, work stoppage, computer failure or malfunction, or any    *
+*  and all other commercial damages or losses, even if such party      *
+*  shall have been informed of the possibility of such damages. This   *
+*  limitation of liability shall not apply to liability for death or   *
+*  personal injury resulting from such party's negligence to the       *
+*  extent applicable law prohibits such limitation. Some               *
+*  jurisdictions do not allow the exclusion or limitation of           *
+*  incidental or consequential damages, so this exclusion and          *
+*  limitation may not apply to You.                                    *
+*                                                                      *
+************************************************************************
+. Litigation
+-------------
+Any litigation relating to this License may be brought only in the
+courts of a jurisdiction where the defendant maintains its principal
+place of business and such litigation shall be governed by laws of that
+jurisdiction, without reference to its conflict-of-law provisions.
+Nothing in this Section shall prevent a party's ability to bring
+cross-claims or counter-claims.
+. Miscellaneous
+----------------
+This License represents the complete agreement concerning the subject
+matter hereof. If any provision of this License is held to be
+unenforceable, such provision shall be reformed only to the extent
+necessary to make it enforceable. Any law or regulation which provides
+that the language of a contract shall be construed against the drafter
+shall not be used to construe this License against a Contributor.
+. Versions of the License
+---------------------------
+.1. New Versions
+Mozilla Foundation is the license steward. Except as provided in Section
+.3, no one other than the license steward has the right to modify or
+publish new versions of this License. Each version will be given a
+distinguishing version number.
+.2. Effect of New Versions
+You may distribute the Covered Software under the terms of the version
+of the License under which You originally received the Covered Software,
+or under the terms of any subsequent version published by the license
+steward.
+.3. Modified Versions
+If you create software not governed by this License, and you want to
+create a new license for such software, you may create and use a
+modified version of this License if you rename the license and remove
+any references to the name of the license steward (except to note that
+such modified license differs from this License).
+.4. Distributing Source Code Form that is Incompatible With Secondary
+Licenses
+If You choose to distribute Source Code Form that is Incompatible With
+Secondary Licenses under the terms of this version of the License, the
+notice described in Exhibit B of this License must be attached.
+Exhibit A - Source Code Form License Notice
+-------------------------------------------
+  This Source Code Form is subject to the terms of the Mozilla Public
+  License, v. 2.0. If a copy of the MPL was not distributed with this
+  file, You can obtain one at https://mozilla.org/MPL/2.0/.
+If it is not possible or desirable to put the notice in a particular
+file, then You may include the notice in a location (such as a LICENSE
+file in a relevant directory) where a recipient would be likely to look
+for such a notice.
+You may add additional accurate notices of copyright ownership.
+Exhibit B - "Incompatible With Secondary Licenses" Notice
+---------------------------------------------------------
+  This Source Code Form is "Incompatible With Secondary Licenses", as
+  defined by the Mozilla Public License, v. 2.0.

+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+//! The command-line interface for fabrica.
+//!
+//! Every subcommand operates directly on the store and filesystem; there is no
+//! IPC with a running `serve`. [`run`] is the single entry point invoked by the
+//! `fabrica` binary.
+use std::process::ExitCode;
+/// Parse arguments and dispatch to the requested subcommand.
+///
+/// Returns the process exit code. The command tree is built out over the
+/// implementation phases; today this is a placeholder that exits successfully.
+#[must_use]
+pub fn run() -> ExitCode {
+    ExitCode::SUCCESS
+}

+# cargo-deny configuration. Run via `nix flake check` (checks.deny) or
+# `cargo deny check` in the dev shell.
+[graph]
+all-features = true
+[advisories]
+version = 2
+yanked = "deny"
+[licenses]
+version = 2
+# Permit the common permissive licenses plus MPL-2.0 (our own).
+allow = [
+    "MPL-2.0",
+    "MIT",
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "ISC",
+    "Unicode-3.0",
+    "Zlib",
+    "CC0-1.0",
+]
+confidence-threshold = 0.9
+[bans]
+multiple-versions = "warn"
+wildcards = "deny"
+# In-tree crates are referenced by path without a version; that is not a real
+# wildcard dependency.
+allow-wildcard-paths = true
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"

+# Decisions log
+A running log of design decisions: date, decision, alternatives considered, and
+rationale. Seeded with the decisions the spec (`spec.md`) already makes. Update
+this file on any deviation from the spec (a **SHOULD** deviation **MUST** be
+logged here).
+---
+## 2026-07-24 — Pack transport via `git` subprocess
+**Decision:** Server-side clone/fetch/push is handled by spawning the `git`
+binary (`git upload-pack` / `git receive-pack`), not by libgit2.
+**Alternatives:** Implement the smart pack protocol on top of libgit2's object
+layer; use a pure-Rust reimplementation (`gitoxide`).
+**Rationale:** libgit2 is client-only for transport — it has no server-side
+`upload-pack`/`receive-pack`. Spawning `git` is the supported, correct path.
+libgit2 (via `git2`) is retained for in-process reads (refs, trees, blobs, log,
+diff, signatures, `init_bare`). Consequence: `git` (≥ 2.41) MUST be on `PATH` at
+runtime; the Nix derivation wraps the binary with git on PATH.
+## 2026-07-24 — Repositories stored by id, not name
+**Decision:** On disk, repos live at `{repo_dir}/{id[0..2]}/{id}.git` where `id`
+is a lowercase ULID. The database is the only name→path authority.
+**Alternatives:** Store repos by `{owner}/{name}.git` mirroring the URL.
+**Rationale:** Renames and group moves become metadata-only (a DB update), never
+touching the filesystem. Tradeoff: the tree is not human-browsable;
+`fabrica repo path <user> <name>` resolves it for operators.
+## 2026-07-24 — `/-/` route separator
+**Decision:** Web and API routes disambiguate variable-length repo paths from
+sub-resources with the GitLab `/-/` convention: everything before `/-/` is the
+repo path, everything after is the view.
+**Alternatives:** Fixed-depth paths; a query parameter for the view.
+**Rationale:** Group nesting makes repo paths of unknown depth. `/-/` is an
+unambiguous, well-understood separator.
+## 2026-07-24 — Timestamps as epoch milliseconds
+**Decision:** All timestamps are stored as `BIGINT` unix milliseconds (UTC). No
+`DATETIME` / `TIMESTAMPTZ`.
+**Alternatives:** Native date/time column types per dialect.
+**Rationale:** One portable representation across SQLite and Postgres, ordered by
+plain integer comparison. Ids are `TEXT` ULIDs (lexicographically sortable) used
+for tie-breaking and ordering.
+## 2026-07-24 — `serve` runs in the foreground; no `stop` subcommand
+**Decision:** `fabrica serve` runs in the foreground by default and is stopped by
+signalling its pid (`SIGTERM`/`SIGINT`). `--detach` double-forks and writes a pid
+file. There is no `server start` / `server stop` pair.
+**Alternatives:** A daemonizing `start`/`stop`/`restart` command set.
+**Rationale:** Foreground is correct for systemd and Docker, which own process
+lifecycle. This deviates from an earlier `server start`/`server stop` sketch.
+## 2026-07-24 — Linear search, no index
+**Decision:** Search (in-repo and global) is a linear scan over repo contents at
+request time, with worker-pool, time-budget, and result-count bounds.
+**Alternatives:** Maintain a `tantivy` full-text index.
+**Rationale:** Appropriate for a small, private instance. A `tantivy` index is
+the intended path if linear scan stops being fast enough.
+## 2026-07-24 — Nix flake uses flake-parts
+**Decision:** The flake is structured with `flake-parts` (module system,
+`perSystem`) rather than `flake-utils`.
+**Alternatives:** `flake-utils.lib.eachDefaultSystem`.
+**Rationale:** flake-parts scales better as the flake grows (NixOS module,
+container image, multiple checks) and gives a cleaner multi-output structure. The
+spec permits either; picked one and stay consistent.

+{
+  "nodes": {
+    "crane": {
+      "locked": {
+        "lastModified": 1784564969,
+        "narHash": "sha256-TkTWNhJV/8Wk3czlbz4bwHZkFCaCHPsOy+oJe4PUiXg=",
+        "owner": "ipetkov",
+        "repo": "crane",
+        "rev": "7930f6c291de6f83c257839d434592aa085f290a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "ipetkov",
+        "repo": "crane",
+        "type": "github"
+      }
+    },
+    "fenix": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "rust-analyzer-src": "rust-analyzer-src"
+      },
+      "locked": {
+        "lastModified": 1784882000,
+        "narHash": "sha256-uexExdN1itvHYHFek4bpvRqURvxYLKWUetpekP+udbk=",
+        "owner": "nix-community",
+        "repo": "fenix",
+        "rev": "42d2c5f54f90dd11ebd5dc7732f004aa900cfecd",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "fenix",
+        "type": "github"
+      }
+    },
+    "flake-parts": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib"
+      },
+      "locked": {
+        "lastModified": 1782949081,
+        "narHash": "sha256-vp6Y/Grm98ESt6ceOkWiHWyZRDV3J1RID4w+6NWK9yA=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "17c9d6cdfc60c64f4ee8d306f9bc0b4ccb51481e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1784796856,
+        "narHash": "sha256-wWFrV5/Qbm+lyt5x20E/bSbfJiGKMo4RCxZV8cl/WZI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "e2587caef70cea85dd97d7daab492899902dbf5d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-lib": {
+      "locked": {
+        "lastModified": 1782614948,
+        "narHash": "sha256-ePjCwr1sNm9NYUqywL7QfK3JnlS015msC+eBu2zKlp8=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "db3f255737b94216eb71cce308e2912cf6bc2d7c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "crane": "crane",
+        "fenix": "fenix",
+        "flake-parts": "flake-parts",
+        "nixpkgs": "nixpkgs"
+      }
+    },
+    "rust-analyzer-src": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1784667699,
+        "narHash": "sha256-853teJQOgTTKRfNxcIJ53ziJOGNeg3c74PvQl5l61Jc=",
+        "owner": "rust-lang",
+        "repo": "rust-analyzer",
+        "rev": "1174734d9c6453d13d2b5e3d578512c579ca37f1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "rust-lang",
+        "ref": "nightly",
+        "repo": "rust-analyzer",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

+{
+  description = "fabrica — a self-hosted git server (single binary, HTTPS + SSH, themeable web UI)";
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    flake-parts.url = "github:hercules-ci/flake-parts";
+    fenix = {
+      url = "github:nix-community/fenix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    crane.url = "github:ipetkov/crane";
+  };
+  outputs =
+    inputs@{ flake-parts, ... }:
+    flake-parts.lib.mkFlake { inherit inputs; } {
+      systems = [
+        "x86_64-linux"
+        "aarch64-linux"
+        "x86_64-darwin"
+        "aarch64-darwin"
+      ];
+      perSystem =
+        { self'
+        , pkgs
+        , system
+        , ...
+        }:
+        let
+          # Nightly toolchain via fenix, pinned through flake.lock. The `complete`
+          # profile carries clippy, rustfmt, rust-src, and rust-analyzer.
+          fenixToolchain = inputs.fenix.packages.${system}.complete.toolchain;
+          craneLib = (inputs.crane.mkLib pkgs).overrideToolchain fenixToolchain;
+          commonArgs = {
+            src = craneLib.cleanCargoSource ./.;
+            strictDeps = true;
+            nativeBuildInputs = [
+              pkgs.pkg-config
+              pkgs.makeWrapper
+            ];
+            buildInputs = [
+              pkgs.libgit2
+              pkgs.zlib
+              pkgs.openssl
+            ];
+            # Use the system libgit2 rather than the vendored copy.
+            LIBGIT2_NO_VENDOR = "1";
+          };
+          cargoArtifacts = craneLib.buildDepsOnly commonArgs;
+          fabrica = craneLib.buildPackage (
+            commonArgs
+            // {
+              inherit cargoArtifacts;
+              doCheck = false; # tests run as their own flake check
+              # The git plumbing must always be reachable at runtime.
+              postInstall = ''
+                wrapProgram $out/bin/fabrica \
+                  --prefix PATH : ${pkgs.lib.makeBinPath [ pkgs.git ]}
+              '';
+            }
+          );
+        in
+        {
+          packages = {
+            default = fabrica;
+            fabrica = fabrica;
+            container = pkgs.dockerTools.buildLayeredImage {
+              name = "fabrica";
+              tag = "latest";
+              contents = [
+                fabrica
+                pkgs.git
+                pkgs.cacert
+              ];
+              config = {
+                Entrypoint = [ "${fabrica}/bin/fabrica" ];
+                Cmd = [ "serve" ];
+                ExposedPorts = {
+                  "8080/tcp" = { };
+                  "2222/tcp" = { };
+                };
+                Volumes = {
+                  "/var/lib/fabrica" = { };
+                };
+              };
+            };
+          };
+          checks = {
+            inherit fabrica;
+            clippy = craneLib.cargoClippy (
+              commonArgs
+              // {
+                inherit cargoArtifacts;
+                cargoClippyExtraArgs = "--workspace --all-targets -- -D warnings";
+              }
+            );
+            fmt = craneLib.cargoFmt {
+              src = craneLib.cleanCargoSource ./.;
+            };
+            test = craneLib.cargoNextest (
+              commonArgs
+              // {
+                inherit cargoArtifacts;
+                partitions = 1;
+                partitionType = "count";
+                # Crates have no tests during early scaffolding; do not treat an
+                # empty test set as a failure.
+                cargoNextestExtraArgs = "--no-tests=pass";
+              }
+            );
+            deny = craneLib.cargoDeny {
+              src = craneLib.cleanCargoSource ./.;
+            };
+            doc = craneLib.cargoDoc (
+              commonArgs
+              // {
+                inherit cargoArtifacts;
+              }
+            );
+          };
+          devShells.default = craneLib.devShell {
+            checks = self'.checks;
+            packages = [
+              pkgs.sqlx-cli
+              pkgs.sqlite
+              pkgs.postgresql
+              pkgs.git
+              pkgs.openssh
+              pkgs.gnupg
+              pkgs.cargo-nextest
+              pkgs.cargo-deny
+              pkgs.just
+              pkgs.pkg-config
+            ];
+            buildInputs = commonArgs.buildInputs;
+            LIBGIT2_NO_VENDOR = "1";
+          };
+          formatter = pkgs.nixpkgs-fmt;
+        };
+    };
+}

+# fabrica task runner. `just check` is the quality gate that MUST pass after
+# every unit of work. `nix flake check` is the superset.
+# List available recipes.
+default:
+    @just --list
+# The quality gate: format, check, lint, test. Run after every unit of work.
+check: fmt-check build clippy test
+# Verify formatting without modifying files.
+fmt-check:
+    cargo fmt --all -- --check
+# Format the workspace in place.
+fmt:
+    cargo fmt --all
+# Type-check the whole workspace, including tests and examples.
+build:
+    cargo check --workspace --all-targets
+# Lint with clippy, denying all warnings.
+clippy:
+    cargo clippy --workspace --all-targets -- -D warnings
+# Run the test suite.
+test:
+    cargo test --workspace
+# Run the full Nix gate (checks.{clippy,fmt,test,deny,doc}).
+flake-check:
+    nix flake check

+# Nightly is a currency preference only: no `#![feature(...)]` gates, code must
+# compile on stable. This file is for non-Nix users; Nix pins nightly via fenix
+# through flake.lock.
+[toolchain]
+channel = "nightly"
+components = ["rustfmt", "clippy", "rust-src", "rust-analyzer"]

+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+//! `fabrica` — a self-hosted git server.
+//!
+//! The binary is deliberately thin: it parses arguments and dispatches into the
+//! [`cli`] crate, and nothing else lives here.
+use std::process::ExitCode;
+fn main() -> ExitCode {
+    cli::run()
+}