Cargo.toml

[workspace]
members = [
    "crates/acp",
    "crates/checkpoint",
    "crates/auth-api",
    "crates/auth-codex",
    "crates/auth-grok",
    "crates/catalog",
    "crates/cli",
    "crates/config",
    "crates/config-types",
    "crates/core",
    "crates/credentials",
    "crates/fuzzy-file-search",
    "crates/guardian",
    "crates/hooks",
    "crates/image",
    "crates/mcp",
    "crates/memory",
    "crates/oauth",
    "crates/paths",
    "crates/plan",
    "crates/plugin",
    "crates/plugin-api",
    "crates/protocol",
    "crates/provider-anthropic",
    "crates/provider-api",
    "crates/provider-codex",
    "crates/provider-grok",
    "crates/provider-ollama",
    "crates/provider-openrouter",
    "crates/sandbox",
    "crates/schedule",
    "crates/skills",
    "crates/subagent",
    "crates/tasks",
    "crates/test-support",
    "crates/tool",
    "crates/tools",
    "crates/tui",
    "crates/wire",
    "crates/workspace",
]
resolver = "3"

[workspace.package]
version = "0.1.48"
edition = "2024"
rust-version = "1.99"
license = "Apache-2.0"
repository = "https://github.com/milisp/keke-agent"

[workspace.dependencies]
# --- tier 0: contract crates (keep these dependency-light) ---
keke-auth-api = { path = "crates/auth-api" }
keke-config-types = { path = "crates/config-types" }
keke-paths = { path = "crates/paths" }
keke-plugin-api = { path = "crates/plugin-api" }
keke-protocol = { path = "crates/protocol" }
keke-provider-api = { path = "crates/provider-api" }
keke-tool = { path = "crates/tool" }
keke-wire = { path = "crates/wire" }
keke-catalog = { path = "crates/catalog" }
keke-fuzzy-file-search = { path = "crates/fuzzy-file-search" }
keke-oauth = { path = "crates/oauth" }
keke-sandbox = { path = "crates/sandbox" }

# --- tier 1: engine ---
keke-acp = { path = "crates/acp" }
keke-config = { path = "crates/config" }
keke-checkpoint = { path = "crates/checkpoint" }
keke-core = { path = "crates/core" }
keke-credentials = { path = "crates/credentials" }
keke-workspace = { path = "crates/workspace" }

# --- tier 2: plugins ---
keke-auth-codex = { path = "crates/auth-codex" }
keke-guardian = { path = "crates/guardian" }
keke-hooks = { path = "crates/hooks" }
keke-mcp = { path = "crates/mcp" }
keke-memory = { path = "crates/memory" }
keke-plan = { path = "crates/plan" }
keke-schedule = { path = "crates/schedule" }
keke-skills = { path = "crates/skills" }
keke-auth-grok = { path = "crates/auth-grok" }
keke-plugin = { path = "crates/plugin" }
keke-provider-codex = { path = "crates/provider-codex" }
keke-provider-anthropic = { path = "crates/provider-anthropic" }
keke-provider-grok = { path = "crates/provider-grok" }
keke-provider-ollama = { path = "crates/provider-ollama" }
keke-provider-openrouter = { path = "crates/provider-openrouter" }
keke-subagent = { path = "crates/subagent" }
keke-tasks = { path = "crates/tasks" }
keke-test-support = { path = "crates/test-support" }
keke-image = { path = "crates/image" }
keke-tools = { path = "crates/tools" }
keke-tui = { path = "crates/tui" }

# --- third-party ---
# `unstable_protocol_v2` for `session/resume`'s `replayFrom`: v2 folded v1's
# `session/load` into resume, and the cursor is the only thing that says whether
# the client wants the transcript replayed or just the session back.
agent-client-protocol = { version = "3.3", features = ["unstable_protocol_v2", "stdio"] }
anyhow = "1"
axum = { version = "0.8", features = ["macros"] }
base64 = "0.22"
crossterm = "0.29"
chrono = { version = "0.4", default-features = false, features = ["clock", "serde", "std"] }
clap = { version = "4", features = ["derive", "env"] }
dirs = "6"
eventsource-stream = "0.2"
futures = "0.3"
ignore = "0.4"
image = { version = "0.25", default-features = false, features = ["png", "jpeg", "gif", "webp"] }
# Linux-only, for `keke-sandbox`: the filesystem and syscall halves of the
# confinement. Both are safe wrappers, which is what keeps the workspace-wide
# `unsafe_code = "deny"` intact.
landlock = "0.4"
libc = "0.2"
seccompiler = "0.5"
keyring = { version = "3", features = ["apple-native", "linux-native", "windows-native"] }
pulldown-cmark = { version = "0.13", default-features = false }
rand = "0.9"
ratatui = "0.29"
regex = "1"
terminal-light = "1.9.1"
# `socks` and `macos-system-configuration` are what make a proxy work: without
# them a deployment behind a SOCKS proxy, or one whose proxy is set in macOS
# System Settings rather than in the environment, cannot reach an issuer at all —
# and a token endpoint that cannot be reached looks exactly like a credential
# that cannot be renewed.
reqwest = { version = "0.12", default-features = false, features = ["http2", "json", "macos-system-configuration", "rustls-tls", "socks", "stream"] }
schemars = "0.8"
serde = { version = "1", features = ["derive"] }
serde_json = "1"
sha2 = "0.10"
similar = "2"
tempfile = "3"
thiserror = "2"
tokio = "1"
toml = "0.9"
tracing = "0.1"
unicode-width = "0.2"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
url = "2"
uuid = { version = "1", features = ["serde", "v4", "v7"] }
wiremock = "0.6"

[workspace.lints.rust]
unsafe_code = "deny"
unreachable_pub = "warn"
# `Tool::execute` returns `impl Future`; the RPITIT-over-async_trait rule in
# AGENTS.md depends on this staying allowed.
async_fn_in_trait = "allow"

[workspace.lints.clippy]
expect_used = "warn"
unwrap_used = "warn"

[profile.release]
lto = "thin"
codegen-units = 1
strip = "debuginfo"