Prepare 0.8.0 core boundary

Author: eldryoth

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.8.0
+
+- Bumped the crate to `0.8.0`.
+- Added an internal render plan boundary shared by raster rendering, SVG
+  rendering, and encoding entry points.
+- Changed public enum `ALL` lists to slices so variant lists no longer carry
+  duplicated manual array lengths.
+- Added `from_byte` helpers for `AvatarHashAlgorithm`, `AvatarKind`,
+  `AvatarBackground`, and `AvatarOutputFormat`.
+- Added tests that fail if public enum `ALL` lists drift from parser/display
+  behavior.
+- Documented the future `no_std + alloc` core boundary and the dependencies
+  that currently belong outside it.
+
 ## 0.7.0
 
 - Bumped the crate to `0.7.0`.

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "hashavatar"
-version = "0.7.0"
+version = "0.8.0"
 edition = "2024"
 rust-version = "1.95"
 description = "Deterministic procedural avatars in Rust with configurable identity hashing and WebP, PNG, JPEG, GIF, and SVG export"

Cargo.toml

@@ -6,14 +6,16 @@ The crate starts conservative: validated avatar dimensions, bounded identity inp
 
 ## Current Status
 
-The current development version is `0.7.0`.
+The current development version is `0.8.0`.
 
 Implemented now:
 
 - Pure library crate; no bundled demo server and no CLI binary.
 - Deterministic avatars derived from SHA-512 identity hashes by default.
 - Optional BLAKE3 and XXH3-128 identity derivation behind explicit Cargo
   features.
+- Public enum variant lists use single-source `ALL` slices and byte-to-variant
+  helpers for deterministic option derivation.
 - Namespace-aware identity derivation for tenant isolation and visual rollouts.
 - Length-prefixed hash components to avoid delimiter ambiguity.
 - Avatar families: `cat`, `dog`, `robot`, `fox`, `alien`, `monster`, `ghost`, `slime`, `bird`, `wizard`, `skull`, `paws`, `planet`, `rocket`, `mushroom`, `cactus`, `frog`, `panda`, `cupcake`, `pizza`, `icecream`, `octopus`, and `knight`.
@@ -41,7 +43,7 @@ Planned or intentionally external:
 | License | `MIT OR Apache-2.0` |
 | MSRV | Rust `1.95.0` |
 | Crate shape | Library only |
-| Runtime dependencies | `image`, `palette`, `rand`, `sha2`; optional `blake3`, `xxhash-rust` |
+| Runtime dependencies | `image`, `palette`, `rand`, `sha2`, `subtle`, `zeroize`; optional `blake3`, `xxhash-rust` |
 | Unsafe policy | `#![forbid(unsafe_code)]` |
 | Filesystem policy | No public path-writing APIs |
 | Dimension limits | `64..=2048` pixels per side |
@@ -53,22 +55,23 @@ Planned or intentionally external:
 
 Security-control details live in [docs/SECURITY_CONTROLS.md](docs/SECURITY_CONTROLS.md). Dependency policy lives in [docs/DEPENDENCIES.md](docs/DEPENDENCIES.md). Panic policy lives in [docs/PANIC_POLICY.md](docs/PANIC_POLICY.md).
 
-Future version planning for core-boundary preparation, possible
-`no_std + alloc` support, visual layers, and 1.0 stabilization lives in
-[docs/VERSION_PLAN.md](docs/VERSION_PLAN.md).
+Future version planning for possible `no_std + alloc` support, visual layers,
+and 1.0 stabilization lives in [docs/VERSION_PLAN.md](docs/VERSION_PLAN.md).
+`0.8.0` prepares the internal boundary for a future core crate, but `no_std`
+is not a public support contract yet.
 
 ## Install
 
 ```toml
 [dependencies]
-hashavatar = "0.7.0"
+hashavatar = "0.8.0"
 ```
 
 Optional identity hash algorithms are disabled by default:
 
 ```toml
 [dependencies]
-hashavatar = { version = "0.7.0", features = ["blake3", "xxh3"] }
+hashavatar = { version = "0.8.0", features = ["blake3", "xxh3"] }
 ```
 
 For a local checkout:
@@ -167,6 +170,24 @@ assert!(!bytes.is_empty());
 
 Use namespaces when the same user identifier must not collide visually across tenants, products, or style-version rollouts.
 
+## Example: Deterministic Options From Bytes
+
+```rust
+use hashavatar::{AvatarBackground, AvatarKind, AvatarOptions};
+
+let digest_bytes = [42_u8, 199_u8];
+let options = AvatarOptions::new(
+    AvatarKind::from_byte(digest_bytes[0]),
+    AvatarBackground::from_byte(digest_bytes[1]),
+);
+
+assert!(AvatarKind::ALL.contains(&options.kind));
+assert!(AvatarBackground::ALL.contains(&options.background));
+```
+
+The `from_byte` helpers use each enum's `ALL` slice, so new public variants do
+not require duplicated modulo constants in caller code.
+
 ## Example: Optional Hash Algorithm
 
 ```rust
@@ -205,7 +226,7 @@ cryptographic boundary.
 
 ```toml
 [dependencies]
-hashavatar = { version = "0.7.0", features = ["blake3"] }
+hashavatar = { version = "0.8.0", features = ["blake3"] }
 ```
 
 ```rust
@@ -233,7 +254,7 @@ assert!(svg.contains("alien avatar"));
 
 ```toml
 [dependencies]
-hashavatar = { version = "0.7.0", features = ["xxh3"] }
+hashavatar = { version = "0.8.0", features = ["xxh3"] }
 ```
 
 ```rust

README.md

@@ -0,0 +1,34 @@
+# hashavatar 0.8.0
+
+`hashavatar` 0.8.0 prepares the crate for future core-boundary work without
+adding new runtime dependencies or promising `no_std` support yet.
+
+## Highlights
+
+- Bumped the crate to `0.8.0`.
+- Added an internal render plan used by raster, SVG, and encode paths.
+- Changed public enum `ALL` lists from manually sized arrays to slices.
+- Added `from_byte` helpers for deterministic enum selection:
+  - `AvatarHashAlgorithm::from_byte`
+  - `AvatarKind::from_byte`
+  - `AvatarBackground::from_byte`
+  - `AvatarOutputFormat::from_byte`
+- Added tests that protect public enum parser/display behavior.
+- Documented which dependencies belong outside a future `no_std + alloc` core.
+
+## Compatibility
+
+- Avatar rendering output is intended to stay stable from `0.7.0`.
+- Public enum `ALL` associated constants now have slice type
+  `&'static [Self]` instead of fixed-size array types.
+- Existing render, SVG, and encode entry points keep the same behavior.
+- `no_std` is still only a future direction, not a supported public contract.
+
+## Security And Quality
+
+- The dependency graph remains no larger than `0.7.0`.
+- Enum byte derivation uses `ALL.len()` rather than duplicated modulo counts.
+- Tests cover parser/display round trips, documented enum label order, and
+  byte-to-enum derivation.
+- The internal render plan keeps deterministic avatar decisions separate from
+  output encoding concerns.

RELEASE_NOTES_0.8.0.md

@@ -54,3 +54,27 @@ Dependency changes should be reviewed for:
   --all-features` before release.
 
 `scripts/validate-dependencies.sh` enforces the current direct dependency allowlist.
+
+## Future Core Boundary
+
+`0.8.0` starts preparing the code for a possible future `no_std + alloc`
+deterministic core, but the published crate still requires `std`.
+
+Dependencies that belong outside a future core crate:
+
+- `image`, because it provides raster buffers and encoders.
+- `palette`, unless color conversion is replaced or isolated behind a small
+  core color type.
+- `rand`, unless procedural variation is moved to a deterministic byte-schedule
+  that does not require an RNG dependency.
+
+Dependencies that can plausibly remain in or behind a future core boundary:
+
+- `sha2` for default identity hashing, subject to its active `no_std` support.
+- `zeroize` for clearing derived identity material.
+- `subtle` for constant-time identity digest comparison.
+- optional `blake3`, if the feature keeps its own platform acceleration and
+  dependency policy acceptable.
+
+`xxhash-rust` should stay optional and outside security-sensitive guidance
+because XXH3-128 is non-cryptographic.

docs/DEPENDENCIES.md

@@ -98,6 +98,8 @@ deterministic identity input.
 
 ## 0.8.0: Core Boundary Preparation
 
+Status: implemented in `0.8.0`.
+
 Goal: separate deterministic avatar decisions from encoding/integration
 concerns so a future `no_std + alloc` core is realistic.
 
@@ -143,6 +145,17 @@ concerns so a future `no_std + alloc` core is realistic.
 - `scripts/stable_release_gate.sh check` passes.
 - crates.io publish dry run passes.
 
+### Implementation Notes
+
+- Public enum variant lists use `ALL` slices rather than array constants with
+  duplicated lengths.
+- `from_byte` helpers derive variants from `ALL.len()` for hash algorithms,
+  avatar kinds, backgrounds, and output formats.
+- Tests cover parser/display drift and byte-to-variant behavior for public
+  enums.
+- Raster and SVG rendering now share an internal render plan before output
+  encoding.
+
 ## 0.9.0: `hashavatar-core` Experiment
 
 Goal: publish or prepare a constrained core API that can work in

docs/VERSION_PLAN.md

@@ -8,7 +8,7 @@ publish = false
 cargo-fuzz = true
 
 [dependencies]
-hashavatar = { path = "..", version = "0.7.0" }
+hashavatar = { path = "..", version = "0.8.0" }
 libfuzzer-sys = "0.4"
 
 [[bin]]