feat: WASM based checks

.github/actions/spelling/expect.txt

@@ -48,6 +48,7 @@ Caddyfile
 caninetools
 Cardyb
 CAs
+cdylib
 celchecker
 celphase
 cerr
@@ -65,8 +66,10 @@ chibi
 cidranger
 ckie
 CLAUDE
+clippy
 cloudflare
 cloudsolutions
+codegen
 Codespaces
 confd
 containerbuild
@@ -106,6 +109,7 @@ ellenjoe
 emacs
 embe
 enbyware
+equix
 etld
 everyones
 evilbot
@@ -122,12 +126,14 @@ FCr
 fcrdns
 fcvg
 fediverse
+fff
 ffprobe
 fhdr
 financials
 finfos
 Firecrawl
 flagenv
+fnames
 Fordola
 forgejo
 forwardauth
@@ -161,6 +167,7 @@ grw
 gzw
 Hashcash
 hashrate
+hashx
 hdr
 headermap
 healthcheck
@@ -171,10 +178,12 @@ Hetzner
 hmc
 homelab
 hostable
+hostimport
 HSTS
 htmlc
 htmx
 httpdebug
+httponly
 huawei
 hypertext
 iaskspider
@@ -193,6 +202,7 @@ iptoasn
 isp
 iss
 isset
+iterand
 ivh
 Jenomis
 JGit
@@ -207,6 +217,7 @@ Keyfunc
 keypair
 keypairreloader
 KHTML
+kilohashes
 kinda
 kpr
 KUBECONFIG
@@ -226,6 +237,7 @@ LLU
 loadbalancer
 lol
 lominsa
+lto
 malware
 mcr
 memes
@@ -311,6 +323,7 @@ runlevels
 RUnlock
 runtimedir
 runtimedirectory
+RUSTFLAGS
 Ryzen
 sas
 sasl
@@ -328,6 +341,7 @@ shirou
 shoneypot
 shopt
 Sidetrade
+simd
 simprint
 sitemap
 sls
@@ -360,22 +374,27 @@ telegrambot
 templ
 templruntime
 testarea
+tetratelabs
 Thancred
 thoth
 thothmock
 Tik
 Timpibot
 TLog
 traefik
+trimpath
 trunc
 txn
 uberspace
 Unbreak
 unbreakdocker
 unifiedjs
+uninlined
 unmarshal
 unparseable
 updown
+usecase
+usize
 uvx
 UXP
 valkey
@@ -389,6 +408,7 @@ vnd
 VPS
 Vultr
 WAIFU
+wazero
 wcg
 weblate
 webmaster

.github/workflows/asset-verification.yml

@@ -17,17 +17,21 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: build essential
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
-
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.11.0"
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.25.7"
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+
+      - name: CLI deps
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install brotli zstd
 
       - name: install node deps
         run: |

.github/workflows/docker-pr.yml

@@ -11,7 +11,7 @@ permissions:
   contents: read
 
 jobs:
-  build:
+  ko_pr:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
@@ -21,17 +21,24 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - name: build essential
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
+      - name: Setup `wasmtime`
+        uses: bytecodealliance/actions/wasmtime/setup@9152e710e9f7182e4c29ad218e4f335a7b203613 # v1.1.3
 
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.11.0"
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "stable"
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+
+      - name: CLI deps
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install brotli zstd
 
       - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 

.github/workflows/docker.yml

@@ -17,7 +17,7 @@ permissions:
   pull-requests: write
 
 jobs:
-  build:
+  ko_prod:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
@@ -27,10 +27,8 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - name: build essential
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
+      - name: Setup `wasmtime`
+        uses: bytecodealliance/actions/wasmtime/setup@9152e710e9f7182e4c29ad218e4f335a7b203613 # v1.1.3
 
       - name: Set lowercase image name
         run: |
@@ -42,6 +40,15 @@ jobs:
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "stable"
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+
+      - name: CLI deps
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install brotli zstd
 
       - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 

.github/workflows/go.yml

@@ -19,17 +19,24 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: build essential
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
+      - name: Setup `wasmtime`
+        uses: bytecodealliance/actions/wasmtime/setup@9152e710e9f7182e4c29ad218e4f335a7b203613 # v1.1.3
 
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.11.0"
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "stable"
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+
+      - name: CLI deps
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install brotli zstd
 
       - name: Cache playwright binaries
         uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4

.github/workflows/package-builds-stable.yml

@@ -10,7 +10,7 @@ permissions:
   actions: write
 
 jobs:
-  package_builds:
+  package_builds_stable:
     #runs-on: alrest-techarohq
     runs-on: ubuntu-24.04
     steps:
@@ -20,17 +20,24 @@ jobs:
           fetch-tags: true
           fetch-depth: 0
 
-      - name: build essential
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
+      - name: Setup `wasmtime`
+        uses: bytecodealliance/actions/wasmtime/setup@9152e710e9f7182e4c29ad218e4f335a7b203613 # v1.1.3
 
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.11.0"
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "stable"
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+
+      - name: CLI deps
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install brotli zstd
 
       - name: install node deps
         run: |

.github/workflows/package-builds-unstable.yml

@@ -21,17 +21,24 @@ jobs:
           fetch-tags: true
           fetch-depth: 0
 
-      - name: build essential
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential
+      - name: Setup `wasmtime`
+        uses: bytecodealliance/actions/wasmtime/setup@9152e710e9f7182e4c29ad218e4f335a7b203613 # v1.1.3
 
       - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:
           node-version: "24.11.0"
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "stable"
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+
+      - name: CLI deps
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install brotli zstd
 
       - name: install node deps
         run: |

.github/workflows/rust.yml

@@ -0,0 +1,38 @@
+name: "Rust tests"
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+
+jobs:
+  rust-test:
+    name: cargo test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          cache: false
+          target: wasm32-unknown-unknown
+      - run: cargo test --all-features
+
+  # Check formatting with rustfmt
+  rust-formatting:
+    name: cargo fmt
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          persist-credentials: false
+      # Ensure rustfmt is installed and setup problem matcher
+      - uses: actions-rust-lang/setup-rust-toolchain@02be93da58aa71fb456aa9c43b301149248829d8 # v1.15.1
+        with:
+          components: rustfmt
+          cache: false
+          target: wasm32-unknown-unknown
+      - name: Rustfmt Check
+        uses: actions-rust-lang/rustfmt@559aa3035a47390ba96088dffa783b5d26da9326 # v1.1.1