Release v0.21.0 · bgpkit/oneio

OneIoError is now #[non_exhaustive]; match expressions without a wildcard _ arm will fail to compile
OneIoBuilder::header() now accepts typed HeaderName/HeaderValue (infallible) instead of (K, V) -> Result<Self>
OneIoBuilder::user_agent() now accepts a typed HeaderValue (infallible) instead of V -> Result<Self>
oneio::download() no longer accepts an Option<reqwest::blocking::Client> parameter
oneio::remote module is now pub(crate); create_client_with_headers is deprecated (use OneIo::builder().header_str())
ProgressReader and ProgressCallback are no longer part of the public API

Flattened module layout: src/oneio/ sub-directory removed; all modules are now at src/ level
OneIo and OneIoBuilder are now the primary API surface; free-standing functions delegate to a shared default client
Compression detection strips URL query parameters and fragments before reading the file extension
download_with_retry() uses exponential backoff between retry attempts (100ms × 2^attempt, capped at 6400ms)
Stream cache writes to disk via std::io::copy instead of buffering the full payload in memory
download_async() now preserves raw bytes, matching download()
Default blocking HTTP clients are reused across reads and content-length probes
Stateless read and download helpers now delegate to a reusable OneIo client internally
S3 status failures now use structured errors instead of string parsing
S3 readers now stream data through a bounded channel instead of materializing the full object in memory

OneIoBuilder::header_str(name, value) — string convenience for adding headers (panics on invalid input, matching reqwest convention)
OneIoBuilder::configure_http(f) — escape hatch for setting any reqwest::blocking::ClientBuilder option
OneIoBuilder::timeout(), connect_timeout() — request and connect timeouts
OneIoBuilder::proxy(), no_proxy() — proxy configuration
OneIoBuilder::redirect() — redirect policy
OneIoBuilder::add_root_certificate_pem(), add_root_certificate_der() — load CA certs from raw bytes
OneIo::get_reader_with_type(path, compression) — explicit compression override, useful for URLs with query parameters
OneIo::from_client(client) — construct a OneIo from an existing reqwest::blocking::Client
OneIoError::NetworkWithContext — network errors now carry the URL that failed
OneIoError::InvalidHeader, OneIoError::InvalidCertificate — specific error variants for header and certificate construction failures
ONEIO_CA_BUNDLE environment variable — path to a PEM file added to the HTTP trust store on startup
get_cache_reader() free-standing shortcut kept at crate root for convenience
Added bzip2_decompress benchmark coverage
Added a benchmark helper script for comparing gzip backend feature flags and bz2 decompression
Added reusable OneIo and OneIoBuilder APIs for sharing headers and TLS certificate configuration across requests

Added -H/--header flag for custom HTTP headers ("Name: Value" or "Name:Value"), can be repeated
Added --compression flag to override compression detection (gz, bz2, lz4, xz, zst); no effect with --download
Added progress bar for --download and s3 download, shown when stderr is a terminal; uses spinner when file size is unknown
Added s3 download <BUCKET> <S3_PATH> [--outfile] subcommand
Fixed S3 upload syntax: oneio s3 upload <LOCAL_FILE> <BUCKET> <S3_PATH> (local file is now the first positional arg under the subcommand)
Terminal detection uses std::io::IsTerminal from the standard library; no extra dependency needed
Added indicatif to the cli feature for progress bars

LZ4 compressed writes were silently truncated: lz4::Encoder has no Drop impl and requires an explicit finish() call to write the end-of-stream marker. Fixed with a Lz4Writer wrapper that calls finish() on drop.

lib.rs docstring documents the native-tls feature as the fix for Cloudflare WARP and corporate proxy environments
ONEIO_ACCEPT_INVALID_CERTS and ONEIO_CA_BUNDLE environment variables documented at crate root

Provide feedback