fix(rest): serve API docs with ReDoc so zip leaves the tree

Cargo.toml

@@ -157,4 +157,6 @@ members = [
 ]
 exclude = [
     "fuzz",
+    # The governance workflow builds this external checker in a nested checkout.
+    ".standards-js/tools/js-runtimes",
 ]

README.adoc

@@ -191,7 +191,7 @@ shape (Idris2 / Agda case studies in link:src/chapel/[`+src/chapel/+`]).
 * *Three API surfaces*:
 ** GraphQL (async-graphql, port 8081)
 ** gRPC (tonic + Protocol Buffers, port 50051)
-** REST (axum + OpenAPI/Swagger, port 8000)
+** REST (axum + OpenAPI/ReDoc, port 8000)
 * *AffineScript / AffineScript UI*: AffineScript components are being
 ported to AffineScript-TEA as the stdlib primitives needed for the port
 (Http / Promise / Json / Dict) land in

src/interfaces/README.adoc

@@ -37,10 +37,10 @@ CancelProof
 
 * *Framework:* Rust + axum + utoipa (OpenAPI)
 * *Port:* 8000
-* *Swagger UI:* http://localhost:8000/swagger-ui
+* *API docs (ReDoc):* http://localhost:8000/redoc (raw spec: `+/api-docs/openapi.json+`)
 * *Features:*
 ** RESTful JSON API
-** OpenAPI 3.0 specification with Swagger UI
+** OpenAPI 3.0 specification rendered with ReDoc
 ** Standard HTTP verbs (GET, POST, DELETE)
 ** Endpoints: `+/api/v1/provers+`, `+/api/v1/proofs+`,
 `+/api/v1/proofs/:id/tactics+`

src/interfaces/rest/Cargo.toml

@@ -40,7 +40,7 @@ uuid = { version = "1.25.0", features = ["serde"] }  # ids are minted by echidna
 
 # OpenAPI
 utoipa = { version = "6.0", features = ["axum_extras"] }
-utoipa-swagger-ui = { version = "10.0", features = ["axum"] }
+utoipa-redoc = { version = "7.0", features = ["axum"] }
 
 # ECHIDNA core
 echidna = { path = "../../.." }

src/interfaces/rest/main.rs

@@ -14,7 +14,7 @@ use std::time::Duration;
 use tokio::sync::{Mutex, RwLock};
 use tower_http::cors::CorsLayer;
 use utoipa::OpenApi;
-use utoipa_swagger_ui::SwaggerUi;
+use utoipa_redoc::{Redoc, Servable};
 
 mod ffi_wrapper;
 mod handlers;
@@ -51,6 +51,17 @@ pub struct ProofSession {
     pub start_time: std::time::Instant,
 }
 
+/// Runs the REST API with permissive CORS, ReDoc at `/redoc` and the OpenAPI
+/// JSON specification at `/api-docs/openapi.json`.
+///
+/// Binds to `ECHIDNA_REST_ADDR`, defaulting to `127.0.0.1:8000` when the variable
+/// is absent or is not valid Unicode. Probes Julia ML at `http://127.0.0.1:8090`
+/// and initialises the FFI layer; failures of either check do not prevent startup.
+///
+/// # Panics
+///
+/// Panics if tracing initialisation, HTTP client creation, listener binding or
+/// serving fails.
 #[tokio::main]
 async fn main() {
     tracing_subscriber::fmt()
@@ -117,14 +128,20 @@ async fn main() {
         // Consultant-mode Q&A — free-form question + optional context →
         // LLM-shaped markdown answer via BoJ's cartridge router.
         .route("/api/v1/consult", post(handlers::consult))
-        // OpenAPI documentation
-        .merge(SwaggerUi::new("/swagger-ui").url("/api-docs/openapi.json", ApiDoc::openapi()))
+        // OpenAPI documentation: the raw spec, and ReDoc rendering it.
+        // ReDoc replaced Swagger UI because utoipa-swagger-ui builds
+        // against zip ^8.6, which has no fix for RUSTSEC-2026-0367..0369.
+        .route(
+            "/api-docs/openapi.json",
+            get(|| async { axum::Json(ApiDoc::openapi()) }),
+        )
+        .merge(Redoc::with_url("/redoc", ApiDoc::openapi()))
         .layer(CorsLayer::permissive())
         .with_state(state);
 
     let addr = std::env::var("ECHIDNA_REST_ADDR").unwrap_or_else(|_| "127.0.0.1:8000".to_string());
     tracing::info!("REST API listening on http://{}", addr);
-    tracing::info!("Swagger UI available at http://{}/swagger-ui", addr);
+    tracing::info!("API docs (ReDoc) available at http://{}/redoc", addr);
 
     let listener = tokio::net::TcpListener::bind(&addr).await.unwrap();
     axum::serve(listener, app).await.unwrap();