1. 1[workspace]
2. 2resolver = "2"
3. 3members = [
4. 4 "crates/vak-llm",
5. 5 "crates/vak-session",
6. 6 "crates/vak-context",
7. 7 "crates/vak-store",
8. 8 "crates/vak-tools",
9. 9 "crates/vak-agent",
10. 10 "crates/vak-config",
11. 11 "crates/vak-permission",
12. 12 "crates/vak-plugin",
13. 13 "crates/vak-core",
14. 14 "crates/vak-hooks",
15. 15 "crates/vak-intent",
16. 16 "crates/vak-commit",
17. 17 "crates/vak-mcp",
18. 18 "crates/vak-flow",
19. 19 "crates/vak-delivery",
20. 20 "crates/vak-eval",
21. 21 "crates/vak-server",
22. 22 "crates/vak-ops",
23. 23 "crates/vak-tray",
24. 24 "crates/vak-desktop",
25. 25 "crates/vak-bus",
26. 26 "crates/vak-sandbox",
27. 27 "crates/vak-terminal",
28. 28 "crates/vak-voice",
29. 29 "crates/vak-presentation",
30. 30 "crates/vak-ooxml",
31. 31 "crates/vak",
32. 32]
33. 33
34. 34[workspace.package]
35. 35version = "5.1.3"
36. 36edition = "2024"
37. 37license = "MIT"
38. 38repository = "https://github.com/nranjan2code/code"
39. 39
40. 40[workspace.dependencies]
41. 41vak-bus = { path = "crates/vak-bus" }
42. 42vak-llm = { path = "crates/vak-llm" }
43. 43vak-ops = { path = "crates/vak-ops" }
44. 44vak-server = { path = "crates/vak-server" }
45. 45vak-session = { path = "crates/vak-session" }
46. 46vak-context = { path = "crates/vak-context" }
47. 47vak-store = { path = "crates/vak-store" }
48. 48vak-tools = { path = "crates/vak-tools" }
49. 49vak-agent = { path = "crates/vak-agent" }
50. 50vak-config = { path = "crates/vak-config" }
51. 51vak-core = { path = "crates/vak-core" }
52. 52vak-mcp = { path = "crates/vak-mcp" }
53. 53vak-permission = { path = "crates/vak-permission" }
54. 54vak-plugin = { path = "crates/vak-plugin" }
55. 55vak-flow = { path = "crates/vak-flow" }
56. 56vak-delivery = { path = "crates/vak-delivery" }
57. 57vak-eval = { path = "crates/vak-eval" }
58. 58vak-hooks = { path = "crates/vak-hooks" }
59. 59vak-intent = { path = "crates/vak-intent" }
60. 60vak-commit = { path = "crates/vak-commit" }
61. 61vak-sandbox = { path = "crates/vak-sandbox" }
62. 62vak-terminal = { path = "crates/vak-terminal" }
63. 63vak-voice = { path = "crates/vak-voice" }
64. 64vak-presentation = { path = "crates/vak-presentation" }
65. 65vak-ooxml = { path = "crates/vak-ooxml" }
66. 66
67. 67crossterm = { version = "0.28", features = ["event-stream"] }
68. 68ratatui = { version = "0.29", default-features = false, features = ["crossterm"] }
69. 69# HTTP+SSE server for the headless agent (tokio-native standard)
70. 70# "ws" powers the web client's terminal (docs/design/48-web-client.md §6).
71. 71axum = { version = "0.8", features = ["json", "ws"] }
72. 72tokio-stream = { version = "0.1", features = ["sync"] }
73. 73# CORS so browser/webview surfaces (tauri://localhost, vite dev) can reach it
74. 74tower-http = { version = "0.6", features = ["cors", "compression-gzip"] }
75. 75
76. 76tokio = { version = "1", features = ["full"] }
77. 77tokio-util = { version = "0.7", features = ["rt"] }
78. 78futures = "0.3"
79. 79async-trait = "0.1"
80. 80reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls", "blocking", "multipart"] }
81. 81bytes = "1"
82. 82# Gemini Live API (bidi voice synthesis) speaks raw WebSocket frames.
83. 83tokio-tungstenite = { version = "0.24", features = ["rustls-tls-webpki-roots"] }
84. 84rustls = { version = "0.23.45", default-features = false, features = ["ring"] }
85. 85aws-config = { version = "1.12.0", default-features = false, features = ["default-https-client", "rt-tokio", "credentials-process", "sso"] }
86. 86aws-sdk-bedrock = { version = "1.155.0", default-features = false, features = ["default-https-client", "rt-tokio"] }
87. 87serde = { version = "1", features = ["derive"] }
88. 88serde_json = "1"
89. 89toml = "0.8"
90. 90thiserror = "2"
91. 91clap = { version = "4", features = ["derive", "env"] }
92. 92uuid = { version = "1", features = ["v7"] }
93. 93chrono = { version = "0.4", features = ["serde"] }
94. 94chrono-tz = "0.10"
95. 95regex = "1"
96. 96# Standards-compliant CommonMark AST for lossless, surface-neutral output projection.
97. 97pulldown-cmark = "=0.13.4"
98. 98walkdir = "2"
99. 99# Exact pins: zip and quick-xml are the hostile-input boundary for Office
100. 100# packages (docs/design/72-openxml-documents.md, F12).
101. 101zip = { version = "=4.6.1", default-features = false, features = ["deflate"] }
102. 102csv = "1"
103. 103quick-xml = "=0.41.0"
104. 104image = { version = "0.25", default-features = false, features = ["png", "jpeg", "gif", "webp"] }
105. 105lopdf = { version = "0.45", default-features = false }
106. 106dom_query = "0.27"
107. 107# checkpoint file-content encoding
108. 108base64 = "0.22"
109. 109# Constant-time token comparison for auth (timing-attack resistance)
110. 110subtle = "2"
111. 111# Release lifecycle: real precedence ordering for update decisions
112. 112semver = "1"
113. 113# Artifact integrity for downloaded release binaries
114. 114sha2 = "0.10"
115. 115# Ed25519 verification for signed plugin/catalog evidence; no signing or key generation.
116. 116ring = "=0.17.14"
117. 117hex = "0.4"
118. 118# Cross-platform OS secret storage (macOS Keychain / Windows Credential
119. 119# Manager / Linux Secret Service) for the credential store
120. 120# (docs/design/44-shared-config.md, "Secrets Chain").
121. 121keyring = "3"
122. 122# Embeds the built admin SPA (crates/vak-admin-ui/dist) into the binary
123. 123include_dir = "0.7"
124. 124globset = "0.4"
125. 125similar = { version = "2", features = ["text"] }
126. 126unicode-width = "0.2"
127. 127libc = "0.2"
128. 128tempfile = "3"
129. 129# Linux filesystem containment: safe wrapper over the Landlock LSM syscalls
130. 130landlock = "0.4"
131. 131# Desktop shell (docs/design/20-tauri-desktop.md): native webview + Rust host.
132. 132# `tray-icon` keeps the window and menu-bar lifecycle in this one app process.
133. 133tauri = { version = "2.11", features = ["tray-icon", "image-png"] }
134. 134# Static assets/context codegen for the tauri app at compile time
135. 135tauri-build = "2.6"
136. 136tauri-plugin-dialog = "2.7"
137. 137tauri-plugin-notification = "2.3"
138. 138# Enforces one running instance; a second launch refocuses the first window
139. 139tauri-plugin-single-instance = "2.3"
140. 140# Real PTY for the integrated terminal pane
141. 141portable-pty = "0.9"
142. 142# Menu-bar controller (vak-tray): native tray icon + event loop
143. 143tray-icon = "0.21"
144. 144winit = "0.30"
145. 145notify-rust = "4"
146. 146
147. 147[workspace.lints.rust]
148. 148unsafe_code = "deny"
149. 149
150. 150[workspace.lints.clippy]
151. 151unwrap_used = "warn"
152. 152expect_used = "warn"
153. 153panic = "warn"
154. 154dbg_macro = "deny"
155. 155
156. 156[profile.dev]
157. 157debug = "line-tables-only"
158. 158
159. 159[profile.test]
160. 160debug = "line-tables-only"
161. 161incremental = false
162. 162
163. 163[profile.release]
164. 164lto = "thin"
165. 165strip = "symbols"
166. 166