codex-setup-system/Cargo.toml at main · NDDev-Technocracy-Archive/codex-setup-system · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
[workspace]
resolver = "3"
members = [
    "crates/setup-core",
    "crates/provider-v3",
    "crates/harness-runtime",
    "crates/codex-setup-system",
]

[workspace.package]
version = "0.0.95"
edition = "2024"
rust-version = "1.89"
license = "AGPL-3.0-or-later"
repository = "https://github.com/NDDev-Technocracy-Archive/codex-setup-system"
authors = ["Danil Silantyev / NDDev"]

[workspace.dependencies]
cap-std = "=4.0.3"
cap-fs-ext = "=4.0.3"
# Prefix allocation owns no-replace publication and caller-UID checks on Unix.
# Remove this direct dependency when cap-std supplies the same primitive.
rustix = { version = "=1.1.5", features = ["fs", "process"] }
# Prefix publication uses safe Windows calls without std::fs::rename's
# replacement fallback. Remove these when cap-std offers no-replace rename.
winsafe = { version = "=0.0.29", default-features = false, features = ["kernel"] }
winx = "=0.36.4"
# The software metadata store owns these dependencies. SQLite supplies atomic
# records; the VFS bridge confines every file to held directory capabilities.
# The bridge can be replaced without changing the stored SQL contract.
rusqlite = { version = "=0.40.2", features = ["bundled", "limits"] }
sqlite-plugin = "=0.11.0"
serde = { version = "1", features = ["derive"] }
serde_json = { version = "1", features = ["preserve_order"] }
# Forward configuration owns syntax-preserving top-level key updates. Remove
# these only when that surface is retired or supplied by a shared parser.
jsonc-parser = { version = "=0.34.0", default-features = false, features = ["cst"] }
toml_edit = { version = "=0.25.16", default-features = false, features = ["parse", "display"] }
sha2 = "0.11"
# DEFLATE only. The gzip framing and the tar reading are ours (see
# `setup-core::archive`); an inflate loop is not, because its bugs are
# memory-safety bugs and it is not improved by being hand-written here.
miniz_oxide = "0.9"
setup-core = { path = "crates/setup-core", version = "0.0.95" }
provider-v3 = { path = "crates/provider-v3", version = "0.0.95" }
harness-runtime = { path = "crates/harness-runtime", version = "0.0.95" }

[workspace.lints.rust]
unsafe_code = "forbid"
missing_docs = "warn"

[workspace.lints.clippy]
pedantic = { level = "warn", priority = -1 }
unwrap_used = "deny"
expect_used = "deny"
panic = "deny"

[profile.release]
lto = true
codegen-units = 1
strip = "symbols"
panic = "abort"