Bunch of additions to the Workbench, some Gateway features

.cargo/config.toml

@@ -0,0 +1,5 @@
+# whisper-rs-sys builds whisper.cpp with CUDA and the static CRT (/MT);
+# Rust links with the dynamic CRT (/MD). The linker resolves this fine
+# but warns about the conflicting default lib. Suppress it.
+[target.x86_64-pc-windows-msvc]
+rustflags = ["-C", "link-args=/NODEFAULTLIB:LIBCMT"]

.github/workflows/ci.yml

@@ -26,35 +26,59 @@ jobs:
         run: cargo fmt --all --check
 
       - name: Clippy
-        run: cargo clippy --workspace --all-targets --all-features -- -D warnings
+        run: cargo clippy --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-targets --all-features -- -D warnings
 
       - name: Test
-        run: cargo test --locked --workspace --all-features
+        run: cargo test --locked --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-features
 
       - name: Doctests
-        run: cargo test --workspace --doc
+        run: cargo test --workspace --exclude promptforge-wb --exclude promptforge-wb-server --doc
 
       - name: Docs
         env:
           RUSTDOCFLAGS: -D warnings
-        run: cargo doc --no-deps --all-features
+        run: cargo doc --workspace --no-deps --all-features --exclude promptforge-wb --exclude promptforge-wb-server
+
+  check-workbench:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy
+
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@v2
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install UI dependencies
+        working-directory: crates/promptforge-wb-server/ui
+        run: npm ci
+
+      - name: Clippy (workbench)
+        run: cargo clippy -p promptforge-wb -p promptforge-wb-server --all-targets -- -D warnings
+
+      - name: Test (workbench)
+        run: cargo test --locked -p promptforge-wb -p promptforge-wb-server
 
   msrv:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
-      # Verify the declared MSRV (workspace.package.rust-version) instead of
-      # trusting it: build and test on exactly that toolchain.
       - uses: dtolnay/rust-toolchain@1.89.0
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
 
       - name: Build and test on MSRV
         run: |
-          cargo build --locked --workspace --all-features
-          cargo test --locked --workspace --all-features
+          cargo build --locked --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-features
+          cargo test --locked --workspace --exclude promptforge-wb --exclude promptforge-wb-server --all-features
 
   supply-chain:
     runs-on: ubuntu-latest
@@ -66,13 +90,8 @@ jobs:
       - name: Install cargo-deny and cargo-audit
         run: cargo install cargo-deny cargo-audit --locked
 
-      # Advisories, licenses, duplicate versions, and source policy (deny.toml).
       - name: cargo deny
         run: cargo deny check
 
-      # RUSTSEC vulnerability scan of the committed lockfile.
       - name: cargo audit
         run: cargo audit
-
-      # Unused-dependency hygiene: run `cargo machete` locally
-      # (`cargo install cargo-machete`) before adding or removing dependencies.

.gitignore

@@ -7,3 +7,8 @@
 *.env
 # Voice test fixtures, downloaded out of band (see design-promptforge-wb-1.md).
 /crates/promptforge-wb-server/tests/fixtures/
+# UI build pipeline: npm install target and esbuild output (rebuilt by build.rs).
+/crates/promptforge-wb-server/ui/node_modules/
+/crates/promptforge-wb-server/ui/dist/
+# Workbench tape, written to the cwd when the server runs from the repo root.
+/tape.jsonl

Cargo.toml

@@ -54,6 +54,9 @@ rmcp = { version = "3.1.0", features = [
 ] }
 tower = { version = "0.5", features = ["util"] }
 arc-swap = "1"
+# Serves the workbench UI: reads ui/dist from disk in debug builds, embeds it
+# into the binary in release builds.
+rust-embed = "8"
 glob = "0.3"
 humantime = "2"
 humantime-serde = "1"
@@ -78,10 +81,12 @@ tar = { version = "0.4.46", default-features = false }
 zip = { version = "8.6.0", default-features = false, features = ["deflate-flate2"] }
 indicatif = "0.18"
 # Safe bindings to whisper.cpp; the C++ core is built from source by
-# whisper-rs-sys (cmake + MSVC required).
+# whisper-rs-sys (cmake + MSVC required). Enable the wb-server's "cuda"
+# feature to build with GPU acceleration (needs the CUDA Toolkit).
 whisper-rs = "0.16"
 # WAV parsing for the voice test fixtures; dev-dependency of the wb-server.
 hound = "3.5"
+socket2 = { version = "0.6", features = ["all"] }
 # wry 0.56 pairs with tao 0.36 (wry's own dev-dependency constraint); tao 0.37
 # is newer but untested against this wry.
 wry = "0.56"

crates/promptforge-dev/src/dump/fs_safe.rs

@@ -177,8 +177,7 @@ fn create_dir_restricted(dir: &Path) -> io::Result<()> {
 }
 
 /// Creates (truncating) a file owner-only. On Unix the mode is set at creation;
-/// on Windows the ACL is applied separately once the file is closed
-/// ([`restrict_to_owner`]).
+/// on Windows the ACL is applied separately once the file is closed.
 fn create_restricted(path: &Path) -> io::Result<fs::File> {
     let mut options = fs::OpenOptions::new();
     options.write(true).create(true).truncate(true);