feat: import Chinese-localized Buzz source snapshot

Signed-off-by: cls_宁波本机 <908705107@qq.com>

Cargo.toml

@@ -0,0 +1,181 @@
+[workspace]
+members = [
+    "crates/buzz-relay",
+    "crates/buzz-core",
+    "crates/buzz-conformance",
+    "crates/buzz-push-gateway",
+    "crates/buzz-db",
+    "crates/buzz-pubsub",
+    "crates/buzz-auth",
+    "crates/buzz-search",
+    "crates/buzz-audit",
+    "crates/buzz-acp",
+    "crates/buzz-agent",
+    "crates/sprig",
+    "crates/buzz-test-client",
+    "crates/buzz-ws-client",
+    "crates/buzz-admin",
+    "crates/buzz-workflow",
+    "crates/buzz-media",
+    "crates/buzz-cli",
+    "crates/buzz-pairing-cli",
+    "crates/buzz-sdk",
+    "crates/buzz-persona",
+    "crates/git-credential-nostr",
+    "crates/git-sign-nostr",
+    "crates/buzz-pair-relay",
+    "crates/buzz-relay-mesh",
+    "crates/buzz-dev-mcp",
+    "crates/buzz-voice",
+    "crates/buzz-backend-kubernetes",
+    "examples/countdown-bot",
+]
+exclude = ["desktop/src-tauri"]
+resolver = "2"
+
+[workspace.package]
+version = "0.1.0"
+edition = "2021"
+rust-version = "1.88.0"
+license = "Apache-2.0"
+repository = "https://github.com/block/sprout"
+
+[workspace.dependencies]
+# Runtime
+tokio       = { version = "1", features = ["rt-multi-thread", "macros", "net", "time", "sync", "io-util", "signal", "process"] }
+tokio-util  = { version = "0.7", features = ["rt", "codec"] }
+
+# HTTP + WebSocket
+axum        = { version = "0.8", features = ["ws", "macros"] }
+tower       = { version = "0.5", features = ["timeout", "util", "limit"] }
+tower-http  = { version = "0.6", features = ["trace", "cors", "compression-gzip", "limit", "timeout", "fs"] }
+
+# Database
+sqlx = { version = "0.9", features = [
+    "runtime-tokio", "tls-rustls", "postgres", "uuid", "chrono", "json"
+] }
+
+# Redis
+redis        = { version = "1.0", features = ["tokio-comp", "connection-manager", "tokio-rustls-comp"] }
+deadpool-redis = { version = "0.23", features = ["rt_tokio_1"] }
+
+# Kubernetes (buzz-backend-kubernetes provider). No `ring` feature here: the
+# process-level CryptoProvider is installed explicitly at startup, matching
+# buzz-cli/buzz-acp/buzz-admin/buzz-relay/buzz-dev-mcp — see the comment on the
+# crate's own rustls dependency.
+kube = { version = "2.0", default-features = false, features = ["client", "rustls-tls"] }
+k8s-openapi = { version = "0.26", features = ["v1_31"] }
+
+# Nostr
+nostr = { version = "0.44", features = ["nip44", "nip98"] }
+
+# Serialization
+serde       = { version = "1", features = ["derive"] }
+postcard    = { version = "1", default-features = false, features = ["use-std"] }
+
+# Inter-relay mesh transport (buzz-relay-mesh)
+iroh = { version = "1.0.0-rc.0", default-features = false, features = ["tls-ring"] }
+serde_json  = "1"
+serde_yaml  = "0.9"
+evalexpr    = "11"
+cron        = "0.16"
+# Observability
+tracing                     = "0.1"
+tracing-subscriber          = { version = "0.3", features = ["env-filter", "json"] }
+tracing-opentelemetry       = { version = "0.33" }
+opentelemetry               = { version = "0.32", features = ["trace"] }
+opentelemetry_sdk           = { version = "0.32", features = ["trace", "rt-tokio"] }
+opentelemetry-otlp          = { version = "0.32", default-features = false, features = ["trace", "grpc-tonic", "tls-ring"] }
+metrics             = "0.24"
+metrics-exporter-prometheus = "0.18"
+metrics-util        = "0.20"
+
+# Error handling
+thiserror = "2"
+anyhow    = "1"
+
+# Utilities
+uuid    = { version = "1", features = ["v4", "serde"] }
+chrono  = { version = "0.4", features = ["serde"] }
+
+# HTTP client (webhook delivery)
+reqwest = { version = "0.13", features = ["json", "rustls"], default-features = false }
+
+# Cryptography
+sha2      = "0.11"
+hex       = "0.4"
+hmac      = "0.13"
+base64    = "0.22"
+
+# Randomness
+rand = "0.10"
+subtle = "2.6"
+zeroize = "1.8"
+
+# Concurrent data structures
+dashmap = "6"
+moka    = { version = "0.12", features = ["sync"] }
+
+# Async stream utilities
+futures-util = "0.3"
+
+# WebSocket client (test client)
+tokio-tungstenite = { version = "0.29", features = ["rustls-tls-webpki-roots"] }
+url = "2"
+
+# Property-based testing (dev-only)
+proptest = "1"
+
+# MCP SDK (used by buzz-dev-mcp and buzz-agent)
+rmcp = { version = "1.1.0", features = ["server", "transport-io", "macros"] }
+schemars = { version = "1", default-features = false }
+
+# Internal crates
+buzz-core = { path = "crates/buzz-core" }
+buzz-conformance = { path = "crates/buzz-conformance" }
+buzz-db = { path = "crates/buzz-db" }
+buzz-auth = { path = "crates/buzz-auth" }
+buzz-pubsub = { path = "crates/buzz-pubsub" }
+buzz-search = { path = "crates/buzz-search" }
+buzz-audit = { path = "crates/buzz-audit" }
+buzz-workflow = { path = "crates/buzz-workflow" }
+buzz-media = { path = "crates/buzz-media" }
+buzz-sdk = { path = "crates/buzz-sdk" }
+buzz-ws-client = { path = "crates/buzz-ws-client" }
+buzz-relay-mesh = { path = "crates/buzz-relay-mesh" }
+
+# CI profile — builds the relay for desktop e2e. Dependencies keep full
+# release optimization (warm from main's cache; they carry the runtime hot
+# path: tokio/sqlx/axum). Workspace crates build at opt-level 1 — enough for
+# stable e2e timing (PR #307 flakiness was opt-0 + debug-assertions) at
+# roughly half the codegen cost. `incremental` is irrelevant in CI:
+# rust-cache exports CARGO_INCREMENTAL=0 and never caches member artifacts.
+[profile.ci]
+inherits = "release"
+lto = false
+opt-level = 1
+
+[profile.ci.package."*"]
+opt-level = 3
+
+# Sprig profile — optimized for deploy-anywhere Sprig release artifacts.
+# Sprig is distributed over the network and installed on fresh hosts, so binary
+# size matters more than compile speed here. Keep this separate from the normal
+# `release` profile so desktop/dev release builds do not inherit the slower
+# size-focused settings unless they opt in explicitly.
+[profile.sprig]
+inherits = "release"
+opt-level = "z"
+lto = "fat"
+codegen-units = 1
+panic = "abort"
+strip = true
+
+# Temporary fork pin: aws-creds 0.39.1 (via rust-s3) cannot read EKS Pod Identity
+# credentials (AWS_CONTAINER_CREDENTIALS_FULL_URI + AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE),
+# which the relay pod on bb-block requires for S3 media + git storage. This pins
+# aws-creds to a fork that adopts the aws-creds portion of durch/rust-s3#449
+# (FULL_URI + token-file + Authorization header, refresh-safe, with a loopback
+# allowlist for the auth token). Revert to crates.io once #449 lands upstream.
+[patch.crates-io]
+aws-creds = { git = "https://github.com/tlongwell-block/rust-s3", rev = "c9fce3620dd434c1f810101d672cf384268dbb0f" }