Cargo.toml

[workspace.package]
edition = "2024"
license = "Apache-2.0 or MIT"
repository = "https://github.com/edge-toolkit/core"
rust-version = "1.87.0"

[workspace]
members = [
  "libs/edge-toolkit",
  "libs/et-otlp",
  "libs/otlp-mock",
  "libs/path",
  "libs/web",
  "libs/ws-runner-common",
  "services/ws-modules/audio1",
  "services/ws-modules/bluetooth",
  "services/ws-modules/comm1",
  "services/ws-modules/data1",
  "services/ws-modules/face-detection",
  "services/ws-modules/geolocation",
  "services/ws-modules/graphics-info",
  "services/ws-modules/har1",
  "services/ws-modules/nfc",
  "services/ws-modules/sensor1",
  "services/ws-modules/speech-recognition",
  "services/ws-modules/video1",
  "services/ws-modules/wasi-comm1",
  "services/ws-modules/wasi-data1",
  "services/modules",
  "services/storage",
  "services/ws",
  "services/ws-pyo3-runner",
  "services/ws-server",
  "services/ws-wasm-agent",
  "services/ws-wasi-runner",
  "services/ws-web-runner",
  "services/ws-test-server",
  "utilities/int-gen",
  "utilities/cli",
  "utilities/onnx",
  "generated/rust-rest",
]
resolver = "2"

[workspace.dependencies]
actix = "0.13"
actix-files = "0.6"
actix-rt = "2"
actix-web = { version = "4", features = ["rustls-0_23"] }
actix-web-thiserror = "0.2"
actix-ws = "0.3"
async-trait = "0.1"
asyncapi-rust = "0.2"
base64 = "0.22.1"
bytemuck = { version = "1.16", features = ["derive"] }
bytes = "1"
bytesize = { version = "2", features = ["serde"] }
chrono = { version = "0.4", features = ["serde"] }
clap = { version = "4.4", features = ["derive"] }
clap-markdown = "0.1.5"
deno_core = "0.404.0"
deno_error = "=0.7.1"
deno_resolver = "0.82.0"
# `transpile` enables on-the-fly TS transpilation (deno_node ships its own TS).
# `hmr` makes `op_snapshot_options` use `state.try_take(...).unwrap_or_default()`
# instead of panicking when no SnapshotOptions struct is in OpState -- without
# baking our own startup snapshot we'd otherwise hit the panic on first run.
deno_runtime = { version = "0.259.0", features = ["transpile", "hmr"] }
edge-toolkit = { path = "libs/edge-toolkit", version = "0.1.0" }
et-modules-service = { path = "services/modules", version = "0.1.0" }
et-otlp = { path = "libs/et-otlp", version = "0.1.0" }
et-path = { path = "libs/path", version = "0.1.0" }
et-rest-client = { path = "generated/rust-rest", version = "0.1.0", default-features = false }
et-storage-service = { path = "services/storage", version = "0.1.0" }
et-web = { path = "libs/web", version = "0.1.0" }
et-ws-runner-common = { path = "libs/ws-runner-common", version = "0.1.0" }
et-ws-server = { path = "services/ws-server", version = "0.1.0" }
et-ws-service = { path = "services/ws", version = "0.1.0" }
et-ws-test-server = { path = "services/ws-test-server", version = "0.1.0" }
et-ws-wasm-agent = { path = "services/ws-wasm-agent", version = "0.1.0" }
fs-err = "3"
futures-core = "0.3"
futures-util = "0.3"
heck = "0.5"
hostname = "0.4"
humantime-serde = "1"
int-otlp-mock = { path = "libs/otlp-mock", version = "0.1.0" }
js-sys = "0.3"
kdl = { version = "6", features = ["v1"] }
libc = "0.2"
local-ip-address = "0.6"
log = "0.4"
onnx-extractor = "0.3"
openapiv3 = "2"
opentelemetry = "0.31"
opentelemetry-appender-tracing = "0.31"
opentelemetry-http = "0.31"
opentelemetry-otlp = { version = "0.31", default-features = false, features = [
  "http-json",
  "http-proto",
  "logs",
  "reqwest-blocking-client",
  "trace",
] }
opentelemetry_sdk = "0.31"
ort = { version = "=2.0.0-rc.10", default-features = false, features = ["copy-dylibs"] }
pollster = "0.4"
pretty_yaml = "0.6"
prettyplease = "0.2"
progenitor = "0.14"
progenitor-client = "0.14"
# `auto-initialize` starts the embedded CPython interpreter on first use.
# The pyo3 runner never calls `Py_Initialize` itself.
pyo3 = { version = "0.28", features = ["auto-initialize"] }
# Build-script half of pyo3. Kept on the same release so both resolve the interpreter identically.
pyo3-build-config = "0.28"
qr2term = "0.3"
quote = "1"
rcgen = "0.14"
regex = { version = "1.12", default-features = false }
reqwest = { version = "0.13", default-features = false }
retry-policies = "0.5"
rstest = "0.26"
rustls = "0.23"
schemars = { version = "1.1", features = ["derive"] }
secrecy = { version = "0.10.3", features = ["serde"] }
semver = "1"
serde = { version = "1.0.228", features = ["derive"] }
serde-env = "0.3"
serde-inline-default = "1.0"
serde-wasm-bindgen = "0.6"
serde_default = "0.2"
serde_json = "1"
serde_path_to_error = "0.1"
serde_urlencoded = "0.7"
serde_yaml = "0.9"
strum = { version = "0.27", features = ["derive"] }
syn = "2"
sys_traits = { version = "0.1.28", features = ["libc", "real"] }
temp-env = "0.3"
tempfile = "3"
testing_logger = "0.1"
thiserror = "2"
tokio = "1"
tokio-tungstenite = { version = "0.24", default-features = false }
toml = "0.8"
tracing = "0.1"
tracing-actix-web = { version = "0.7", default-features = false, features = [
  "emit_event_on_error",
  "opentelemetry_0_31",
  "uuid_v7",
] }
tracing-log = "0.2"
tracing-opentelemetry = "0.32"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
tracing-wasm = "0.2"
tree-sitter = "0.25"
tree-sitter-zig = "1"
utoipa = { version = "5", features = ["actix_extras", "yaml"] }
uuid = { version = "1", features = ["serde", "v4", "v7"] }
wasm-bindgen = "0.2"
wasm-bindgen-futures = "0.4"
wasm-bindgen-test = "0.3"
# 44.0.3 is the floor for the RUSTSEC-2026-0182 fix (fd_renumber leak in WASIp1).
# Stay on 44.x for ABI compat with wasmtime-wasi-nn 44.x.
wasmtime = { version = "44.0.3", features = ["async", "component-model"] }
wasmtime-wasi = "44.0.3"
wasmtime-wasi-nn = { version = "44", default-features = false, features = ["onnx"] }
web-sys = "0.3"
wgpu = { version = "29", default-features = false, features = ["dx12", "metal", "vulkan", "wgsl"] }
# Windows-only feature-unification shim: forces `winapi/std` on for deno_io.
winapi = { version = "0.3.9", features = ["std"] }
wit-bindgen = "0.57"
wit-encoder = "0.249"
wit-parser = "0.249"

[profile.release.package.et-ws-wasm-agent]
opt-level = "s"

[workspace.lints.rust]
# groups
unused = { level = "deny", priority = -1 }
# specific lints
dead_code = "deny"
let_underscore = { level = "deny", priority = -1 }
macro_use_extern_crate = "deny"
non_ascii_idents = "deny"
# Allowing private_bounds & private_interfaces & unnameable_types reduces the noise of using `visibility` crate.
private_bounds = "allow"
private_interfaces = "allow"
unnameable_types = "allow"

redundant_imports = "deny"
redundant_lifetimes = "deny"
trivial_numeric_casts = "deny"
# raises an error on unmet expect statements so they are easily found and fixed
unfulfilled_lint_expectations = "deny"
unsafe_attr_outside_unsafe = "deny"
unsafe_code = "deny"
unsafe_op_in_unsafe_fn = "deny"
# unused_crate_dependencies fires per test binary.
# Dev-deps declared once but consumed by only a subset of `tests/*.rs` files (each compiled as its
# own crate) are flagged as unused in the sibling test crates that don't import them. Tracked at
# rust-lang/rust#95513; re-enable when rustc gains a workspace-aware view.
# unused_crate_dependencies = "deny"
unused_results = "deny"

[workspace.lints.rustdoc]
private_intra_doc_links = { level = "deny", priority = 8 }

[workspace.lints.clippy]
# priority numbers are arbitrary ints; higher overrides lower.
# blanket clippy category rules appear at the top, while sub category lints appear below with priority levels
all = { level = "deny", priority = -1 }
complexity = { level = "deny", priority = -1 }
correctness = { level = "deny", priority = -1 }
implicit_return = { level = "allow", priority = 8 }
nursery = { level = "deny", priority = -1 }
pedantic = { level = "deny", priority = -1 }
perf = { level = "deny", priority = -1 }
restriction = { level = "deny", priority = -1 }
style = { level = "deny", priority = -1 }
suspicious = { level = "deny", priority = -1 }
# blanket_clippy_restriction_lints allows the above blanket deny
blanket_clippy_restriction_lints = { level = "allow", priority = 8 }
# allow lint groups to override priorities
integer_division_remainder_used = { level = "deny", priority = 8 }
lint_groups_priority = { level = "allow", priority = 8 }
# Allowing question_mark_used is an explicit implementation choice.
question_mark_used = { level = "allow", priority = 8 }
# Allowing std_instead_of_alloc as we have no reason yet to choose alloc,core over std
single_call_fn = { level = "deny", priority = 4 }
std_instead_of_alloc = { level = "allow", priority = 8 }
std_instead_of_core = { level = "allow", priority = 8 }
str_to_string = { level = "allow", priority = 4 }
struct_excessive_bools = { level = "allow", priority = 8 }
# Allowing shadow_reuse, shadow_same & shadow_unrelated is an explicit style choice.
# It prefers to allow developers to reuse a name even if its type changes.
semicolon_if_nothing_returned = { level = "deny", priority = 4 }
shadow_reuse = { level = "allow", priority = 4 }
shadow_same = { level = "allow", priority = 4 }
shadow_unrelated = { level = "allow", priority = 4 }
# Block-scoped statements like `{ *guard = ...; }` use the closing brace to drop borrows.
# Moving the `;` outside risks extending MutexGuard lifetimes past the intended scope.
semicolon_outside_block = { level = "allow", priority = 4 }
# Allowing separated_literal_suffix & unseparated_literal_suffix is an explicit style choice.
separated_literal_suffix = { level = "allow", priority = 4 }
unseparated_literal_suffix = { level = "allow", priority = 4 }
# Allowing absolute_paths is an explicit style choice.
absolute_paths = { level = "allow", priority = 4 }
# Allowing pub_use is an explicit style choice to streamline coding.
impl_trait_in_params = { level = "deny", priority = 4 }
pub_use = { level = "allow", priority = 4 }
# Allowing module_name_repetitions & mod_module_files are an explicit code layout choice.
mod_module_files = { level = "allow", priority = 4 }
module_name_repetitions = { level = "allow", priority = 4 }
self_named_module_files = { level = "deny", priority = 4 }
# Allowing missing_docs_in_private_items is an explicit but temporary choice to focus on documentation of public items.
missing_docs_in_private_items = { level = "allow", priority = 2 }
# missing_inline_in_public_items forces use of `#[inline]` on public items, which is not desirable.
missing_inline_in_public_items = { level = "allow", priority = 4 }
# Allowing missing_errors_doc as fixing unwrap's is the more important task.
future_not_send = { level = "deny", priority = 4 }
missing_errors_doc = { level = "allow", priority = 4 }
# pattern_type_mismatch fights with idiomatic match ergonomics.
# Examples: `for (k, v) in &map`, `if let Some(x) = &option`.
pattern_type_mismatch = { level = "allow", priority = 4 }
unused_async = { level = "deny", priority = 2 }
# as_conversions & cast_lossless & cast_possible_wrap should be replaced with safer wrapped conversion
as_conversions = "deny"
cast_lossless = "deny"
cast_possible_wrap = "deny"
clone_on_ref_ptr = { level = "deny", priority = 4 }
infinite_loop = "deny"
too_many_arguments = { level = "deny", priority = 2 }
# Allowing missing_trait_methods to avoid forcing explicit implementation of default trait methods
missing_trait_methods = { level = "allow", priority = 4 }
pub_with_shorthand = { level = "allow", priority = 4 }
pub_without_shorthand = { level = "deny", priority = 4 }
# clippy removing pub(crate) is quite confusing at times
redundant_pub_crate = { level = "allow", priority = 4 }

type_complexity = { level = "deny", priority = 4 }

min_ident_chars = { level = "deny", priority = 4 }

# Allowing arbitrary_source_item_ordering, because strict alphabetical ordering destroys semantic grouping.
# E.g. ClientMessage / ServerMessage variants in connection-lifecycle order, struct fields ordered by importance.
arbitrary_source_item_ordering = { level = "allow", priority = 4 }

# Force use of #[expect(..)] instead of #[allow(..)]
allow_attributes = { level = "deny", priority = 4 }
# This lint also covers #[expect] without a reason, so allow this to prevent silly reason values.
allow_attributes_without_reason = { level = "allow", priority = 4 }

let_underscore_must_use = { level = "deny", priority = 4 }
let_underscore_untyped = { level = "deny", priority = 4 }
missing_panics_doc = { level = "allow", priority = 4 }

[workspace.metadata.unmaintained]
ignore = [
  # No `repository` declared. Pulled by deno_node_crypto for AES-GCM.
  "aead-gcm-stream",
  # Archived upstream (servo/bincode).
  # Pulled by deno_core for snapshot serialisation; will move when Deno upgrades to bincode 2.
  "bincode",
  # 1153 days since last update at bitvecto-rs/bitvec.
  # Pulled by sourcemap (via swc tooling under deno_ast).
  "bitvec",
  # 536 days since last update at dsherret/capacity_builder.
  # Pulled by deno_ast.
  "capacity_builder",
  # 1702 days since last update at jethrogb/rust-cexpr.
  # Pulled by bindgen (build-time only via aws-lc-sys / ort-sys).
  "cexpr",
  # 577 days since last update at dajoha/color-print.
  # Pulled by deno_node via color-print.
  "color-print-proc-macro",
  # Archived upstream at matklad/countme.
  "countme",
  # 676 days since last update at denoland/deno_native_certs.
  # Pulled by deno_node + deno_tls.
  "deno_native_certs",
  # No `repository` declared. Pulled by deno_node for `os.userInfo()`.
  "deno_whoami",
  # 1853 days since last update at xdg-rs/dirs.
  "dirs-sys-next",
  # 3182 days since last update at faradayio/exec-rs.
  # Pulled by Deno's `node_shim` (process re-exec on Node compatibility shim).
  "exec",
  # 933 days since last update at HdrHistogram/HdrHistogram_rust.
  # Pulled by deno_node (perf hooks).
  "hdrhistogram",
  # 460 days since last update at xacrimon/dashmap.
  # Pulled by deno_maybe_sync. (Marked stable / feature-complete by upstream.)
  "dashmap",
  # jni-sys requirement ^0.3.0 (used 0.3.1, latest 0.4.1); pulled by ndk-sys, an Android-only dep.
  # Reached via wgpu-hal (deno_webgpu -> wgpu); never compiled on our target platforms.
  "jni-sys",
  # 495 days since last update at rust-lang-nursery/lazy-static.rs.
  # Pulled by actix-web-thiserror-derive (build proc-macro).
  "lazy_static",
  # ndk-sys last updated ~365 days ago; Android-only, reached via wgpu-hal (deno_webgpu -> wgpu).
  # Never compiled on our target platforms.
  "ndk-sys",
  # 391 days since last update at rust-num/num-complex.
  # Pulled by nalgebra (via wgpu / naga). Stable foundational math crate.
  "num-complex",
  # 2215 days since last update at SSheldon/rust-objc.
  # Pulled by `metal` (macOS GPU bindings via wgpu).
  "objc",
  # Not in declared repo (RustCrypto/utils).
  # Pulled by ghash (via aead-gcm-stream above) and other RustCrypto crates as a tiny helper.
  # Effectively dormant but functional.
  "opaque-debug",
  # cargo-unmaintained doesn't follow `hg` repositories.
  "oorandom",
  # 1052 days since last update at hjiayz/p12.
  # Pulled by deno_node_crypto for PKCS#12 cert bundles.
  "p12",
  # Archived upstream at dtolnay/paste.
  # Pulled by macro_rules_attribute via wgpu. Compile-time only.
  "paste",
  # Both unmaintained.
  # GnomedDev/proc-macro-error-2 (the maintained fork of the original proc-macro-error) is archived.
  # Pulled by getset via neli via local-ip-address. Compile-time only.
  "proc-macro-error-attr2",
  "proc-macro-error2",
  # 603 days since last update at timvisee/qr2term-rs.
  "qr2term",
  # False positive.
  # rand_chacha lives in rust-random/rand as a workspace subdir (rand_chacha/).
  # But cargo-unmaintained looks only at the repo root and reports "not in".
  "rand_chacha",
  # Archived upstream at rustls/pemfile. Pulled by deno_native_certs.
  # rustls itself has moved to inline pemfile parsing.
  "rustls-pemfile",
  # 2154 days since last update at arcnmx/serde-value.
  # Pulled by deno_ffi.
  "serde-value",
  # Archived upstream at bodil/smartstring.
  # Pulled by swc_ecma_lexer via deno_ast.
  "smartstring",
  # https://github.com/rustsec/advisory-db/issues/2132
  "serde_yaml",
  # 700 days since last update at dalek-cryptography/subtle.
  "subtle",
  # Archived upstream at rust-analyzer/text-size.
  "text-size",
  # Declared repository toml-rs/toml hosts `toml_writer` (with the `r`), not `toml_write`.
  # The crate is effectively orphaned upstream.
  "toml_write",
  # https://github.com/rustsec/advisory-db/issues/2132
  "unsafe-libyaml",
  # Archived upstream at SimonSapin/rust-utf8.
  "utf-8",
  # Declared repository alacritty/vte is a single-crate repo with no `utf8parse` member.
  # The crate is effectively orphaned upstream.
  "utf8parse",
  # 517 days since last update at daxpedda/web-time.
  "web-time",
  # Declared repository WebAssembly/WASI is spec-only (no `crates/` tree).
  # The crate is effectively orphaned upstream.
  "witx",
  # Archived upstream at SimonSapin/rust-wtf8.
  # Pulled by v8_valueserializer via deno_core.
  # UTF-8 / WTF-8 conversions for V8's structured-clone serializer.
  "wtf8",
  # Not in declared repo (kornelski/xml-rs).
  # Pulled by gl_generator (build-time only, OpenGL bindings via wgpu).
  "xml-rs",
]