feat: replace REST API with market data service

Author: findolor

.gitignore

@@ -14,6 +14,7 @@ packages/raindex/cjs.d.ts
 packages/raindex/esm.js
 packages/raindex/esm.d.ts
 .direnv/
+.raindex/
 
 # Audit proposed fixes
 .fixes/

Cargo.lock

@@ -13,13 +13,18 @@ path = "src/main.rs"
 
 [dependencies]
 raindex_common = { workspace = true }
+async-trait = "0.1"
+moka = { version = "0.12", features = ["future"] }
 rocket = { version = "0.5.1", features = ["json"] }
 rocket_cors = "0.6"
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 thiserror = { workspace = true }
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
 utoipa = { version = "5", features = ["rocket_extras"] }
 utoipa-swagger-ui = { version = "9", features = ["rocket"] }
+uuid = { version = "1", features = ["v4"] }
 
 [target.'cfg(not(target_family = "wasm"))'.dependencies]
 tokio = { workspace = true, features = ["full"] }

crates/rest_api/Cargo.toml

@@ -0,0 +1,52 @@
+# Raindex Market Data API
+
+Public market data service backed by the Raindex Rust SDK and its persistent
+local indexer. It does not require API keys.
+
+## Run locally
+
+```sh
+cargo run -p raindex_rest_api
+```
+
+The first startup creates `.raindex/market-data.sqlite`, synchronizes the
+configured orderbook, and warms the market cache before accepting requests.
+Swagger UI is served at `http://127.0.0.1:8000/swagger/`.
+
+## Routes
+
+- `GET /tickers` — CoinGecko 24-hour ticker data for every listed registry
+  market.
+- `GET /orderbook?ticker_id=...&depth=100` — executable bids and asks for one
+  market.
+- `GET /v1/markets` — complete registry-driven market overview for the Raindex
+  UI.
+- `GET /v1/markets?ticker_id=...` — one market with statistics, trades, and its
+  executable book.
+- `GET /health` and `GET /health/detailed` — service and local-indexer health.
+
+## Configuration
+
+All settings are optional environment variables:
+
+| Variable                               | Default                                  |
+| -------------------------------------- | ---------------------------------------- |
+| `RAINDEX_REGISTRY_URL`                 | Pinned `rain.strategies` registry commit |
+| `RAINDEX_LOCAL_DB_PATH`                | `.raindex/market-data.sqlite`            |
+| `RAINDEX_CACHE_TTL_SECONDS`            | `60`                                     |
+| `RAINDEX_RATE_LIMIT_GLOBAL_RPM`        | `6000`                                   |
+| `RAINDEX_RATE_LIMIT_PER_IP_RPM`        | `120`                                    |
+| `RAINDEX_SNAPSHOT_RECENT_TRADES_LIMIT` | `1000`                                   |
+| `RAINDEX_TRUSTED_PROXY_IP_HEADER`      | unset; direct socket IP is used          |
+
+The all-market overview is refreshed in the background. Executable orderbooks
+are cached per ticker so an orderbook request quotes only the requested market.
+Orderbooks use a fixed 1000-level SDK snapshot. A `depth` of `0` returns that
+entire snapshot; positive values return at most that many levels split evenly
+between bids and asks. CoinGecko's optional historical-trades endpoint is
+intentionally deferred until the SDK can serve arbitrary indexed time ranges
+without truncating to a cached 24-hour window.
+
+Set `RAINDEX_TRUSTED_PROXY_IP_HEADER` only when a trusted ingress overwrites
+that header before forwarding requests. Client-provided forwarding headers are
+ignored by default so public rate limits cannot be bypassed by spoofing them.