Cargo.toml

[workspace]
members = [
    "crates/webcodex-admin",
    "crates/webcodex-build-info",
    "crates/webcodex-browser",
    "crates/webcodex-computer",
    "crates/webcodex-code-mode",
    "crates/webcodex-runner-config",
    "crates/webcodex-cli",
    "crates/webcodex-core",
    "crates/webcodex-environment",
    "crates/webcodex-lsp",
    "crates/webcodex-openai-tunnel",
    "crates/webcodex-persistent-shell",
    "crates/webcodex-process",
    "crates/webcodex-runner",
    "crates/webcodex-runner-registry",
    "crates/webcodex-store",
    "crates/webcodex-workspace",
    "crates/webcodex-workflow-session",
    "crates/webcodex-tool-contracts",
    "crates/webcodex-tool-runtime-contracts",
    "crates/webcodex-validation",
]
resolver = "2"

[workspace.package]
version = "0.5.0"
license = "Apache-2.0"
edition = "2021"

[package]
name = "webcodex"
version.workspace = true
license.workspace = true
edition.workspace = true

[features]
default = []
experimental-code-mode = [
    "dep:webcodex-code-mode",
    "webcodex-code-mode/v8-runtime",
    "webcodex-tool-contracts/experimental-code-mode",
    "webcodex-tool-runtime-contracts/experimental-code-mode",
]
workspace-checkpoints = [
    "webcodex-tool-contracts/workspace-checkpoints",
    "webcodex-tool-runtime-contracts/workspace-checkpoints",
    "webcodex-workspace/workspace-checkpoints",
]

[[bin]]
name = "webcodex-server"
path = "src/bin/webcodex-server.rs"

[dependencies]
webcodex-openai-tunnel = { path = "crates/webcodex-openai-tunnel", version = "0.1.0", default-features = false }
webcodex-admin = { path = "crates/webcodex-admin" }
webcodex-build-info = { path = "crates/webcodex-build-info" }
webcodex-code-mode = { path = "crates/webcodex-code-mode", optional = true }
webcodex-runner-config = { path = "crates/webcodex-runner-config" }
webcodex-runner-registry = { path = "crates/webcodex-runner-registry" }
webcodex-core = { path = "crates/webcodex-core" }
webcodex-environment = { path = "crates/webcodex-environment" }
webcodex-process = { path = "crates/webcodex-process" }
webcodex-tool-contracts = { path = "crates/webcodex-tool-contracts" }
webcodex-tool-runtime-contracts = { path = "crates/webcodex-tool-runtime-contracts" }
webcodex-validation = { path = "crates/webcodex-validation", features = ["session-evidence"] }
webcodex-workflow-session = { path = "crates/webcodex-workflow-session" }
webcodex-store = { path = "crates/webcodex-store" }
webcodex-workspace = { path = "crates/webcodex-workspace" }
# Keep production HTTP features explicit: Salvo's defaults also enable its test
# client and compression helpers. Tests opt in separately below.
salvo = { version = "0.93", default-features = false, features = [
    "cookie", "fix-http1-request-uri", "server", "server-handle", "http1", "http2",
    "aws-lc-rs", "matched-path", "cors", "affix-state", "websocket", "timeout",
] }
tokio = { version = "1", features = ["full"] }
tokio-tungstenite = { version = "0.29", features = ["connect", "rustls-tls-webpki-roots"] }
futures-util = "0.3"
serde = { version = "1", features = ["derive", "rc"] }
serde_json = { version = "1", features = ["raw_value"] }
serde_urlencoded = "0.7"
uuid = { version = "1", features = ["v4"] }
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
chrono = { version = "0.4", features = ["serde"] }
anyhow = "1"
toml = "0.8"
base64 = "0.22"
reqwest = { version = "0.12", default-features = false, features = ["blocking", "json", "rustls-tls"] }
url = "2"
sha2 = "0.10"
tempfile = "3"
zstd = "0.13"
zip = { version = "2", default-features = false, features = ["deflate"] }
unicase = "2.9"
# Custom QUIC agent transport. Quinn reuses the
# rustls 0.23 + aws-lc-rs provider already present transitively (via
# tokio-tungstenite / salvo). `rustls-pemfile` loads PEM cert/key on the
# server. Versions are pinned to the 0.11 / 0.23 / 2.x lines already
# resolved in Cargo.lock to avoid introducing a second rustls major.
quinn = "0.11"
rustls = "0.23"
rustls-pemfile = "2"
# Unix process-group reap for synchronous local commands (`run_command_sync`).
# A direct `kill(-pgid, SIGKILL)` reliably reaps background grandchildren that
# inherit the stdout/stderr pipes — otherwise `wait_with_output` blocks on pipe
# EOF forever — without spawning a `kill` process on every local command.
# Already present transitively; pinned to the resolved 0.2 line.
[target.'cfg(unix)'.dependencies]
libc = "0.2"

# Narrow Windows-native ACL support for project/share private state and managed
# tunnel executable caches. This is intentionally not a generic filesystem API.
[target.'cfg(windows)'.dependencies]
windows-sys = { version = "0.61", features = [
    "Win32_Foundation",
    "Win32_Security",
    "Win32_Security_Authorization",
    "Win32_Storage_FileSystem",
    "Win32_System_Threading",
] }

# Developer builds favor iteration speed and compact artifacts. WebCodex does
# not rely on source-line debug information in ordinary local/CI diagnostics;
# debug assertions remain enabled independently of debuginfo.
[profile.dev]
debug = 0

[profile.test]
debug = 0

# Release binaries ship via the npm wrapper; optimize for size without
# changing runtime behavior (panic unwinding stays enabled).
[profile.release]
strip = "symbols"
lto = "thin"
codegen-units = 1

# Fast optimized builds for self-hosted dogfood deployment. Keep release-like
# runtime semantics while trading peak optimization for rebuild speed.
[profile.dogfood]
inherits = "release"
lto = "off"
codegen-units = 16
incremental = true

[dev-dependencies]
tokio = { version = "1", features = ["test-util"] }
webcodex-runner-registry = { path = "crates/webcodex-runner-registry", features = ["root-test-support"] }
rusqlite = { version = "0.40.2", features = ["bundled"] }
webcodex-store = { path = "crates/webcodex-store", features = ["root-test-support"] }
webcodex-tool-contracts = { path = "crates/webcodex-tool-contracts", features = ["root-test-support"] }
webcodex-workflow-session = { path = "crates/webcodex-workflow-session", features = ["root-test-support"] }
urlencoding = "2"
salvo = { version = "0.93", default-features = false, features = ["test"] }
# Self-signed cert generation for QUIC integration tests. Uses the `ring`
# provider that is already in the dependency tree (via quinn-proto), so it
# does not pull a new crypto backend.
rcgen = "0.13"