mirror of
https://github.com/hanzoai/graph.git
synced 2026-10-30 18:35:37 +00:00
zeekay
f5aaeb712e
Derived from Dgraph (github.com/dgraph-io/dgraph) at commit 64804bd2, Apache-2.0. See NOTICE. WHAT THIS IS. The graph engine as a Go library: posting lists, the DQL parser, the type and tokenizer system, the index and schema layers, and the wire types. 39,170 lines of the upstream's 166,337. THE STORE is github.com/luxfi/zapdb, a Badger fork that kept the package name, the subpackages (options, pb, y) and the API — Open, OpenManaged, DB, Options — so the 74 import sites are aliased rather than rewritten. THE CODEC is ZAP. zapdb serializes with ZAP, not protobuf: its pb package builds the ZAP types by default and the protobuf ones only under `-tags grpc`, a path that does not compile (table/builder.go calls pb.Marshal, which that tag removes). One call site in posting needed converting; every other type here is Hanzo's own protobuf and is untouched. NO TRANSPORT. An embedded engine dials nothing, so nothing here imports google.golang.org/grpc. Removed: 20 transport functions in x, the generated service stubs for Raft, Zero and Worker (1,657 lines), and the JWT helper — identity belongs to IAM. The core called none of them. NOT KEPT: worker, conn, raftwal, the cluster commands, the GraphQL layer and the test harnesses. `query`, the DQL execution engine, went with them because it depends on worker; parsing DQL is available here, executing it is not. The history of the upstream project lives at github.com/dgraph-io/dgraph. This repository begins at the derivation because three quarters of that history describes code this fork does not carry.
29 lines
1.0 KiB
Go
29 lines
1.0 KiB
Go
/*
|
|
* SPDX-FileCopyrightText: © 2017-2026 Istari Digital, Inc.
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*/
|
|
|
|
package buildvars
|
|
|
|
// FIPS140CryptoRestricted reports whether this binary's cryptographic
|
|
// selections are restricted to the FIPS 140 approved-algorithms set.
|
|
// Default false. A downstream fork running FIPS-restricted builds sets
|
|
// this var to true from a tag-guarded init(), where the tag is whatever
|
|
// the fork uses to gate its FIPS-aware code paths. The init() runs
|
|
// before any caller's main() or test body.
|
|
//
|
|
// Test code uses it to skip cases the FIPS-restricted binary cannot
|
|
// satisfy:
|
|
//
|
|
// if buildvars.FIPS140CryptoRestricted {
|
|
// t.Skip("test exercises crypto outside the FIPS 140 restrictions")
|
|
// }
|
|
//
|
|
// This is a build-time fact about which cryptographic choices the
|
|
// binary accepts. It does NOT report whether the underlying
|
|
// cryptographic implementation is FIPS 140-validated at runtime;
|
|
// crypto/fips140.Enabled() answers that.
|
|
//
|
|
// Read-only after package init.
|
|
var FIPS140CryptoRestricted = false
|