Cargo.toml

[workspace]
resolver = "3"
members = [
    "crates/openlogi",
    "crates/openlogi-core",
    "crates/openlogi-device-registry",
    "crates/openlogi-fixture",
    "crates/openlogi-inject",
    "crates/openlogi-hidpp",
    "crates/openlogi-hidpp-derive",
    "crates/openlogi-hid",
    "crates/openlogi-device",
    "crates/openlogi-camera",
    "crates/openlogi-permissions",
    "crates/openlogi-assets",
    "crates/openlogi-cli",
    "crates/openlogi-ipc",
    "crates/openlogi-flow",
    "crates/openlogi-agent-core",
    "crates/openlogi-agent",
    "crates/openlogi-desktop",
    "crates/openlogi-ui",
    "crates/openlogi-overlay",
    "crates/openlogi-hook",
    "xtask",
]
# The CLI used to be the root package, so a bare `cargo build` / `cargo run`
# built it alone. Keep that: without this, a virtual workspace defaults to every
# member, dragging GPUI's Metal shader toolchain into the simplest build there is.
default-members = ["crates/openlogi"]

[workspace.package]
version = "0.9.0"
edition = "2024"
# Tracks current stable rather than trailing it. OpenLogi ships as an app —
# prebuilt installers, and no crate here has an external reverse dependency —
# so a floor below stable buys nobody compatibility and only costs us APIs.
# Raise this freely the day a release lands something worth using; the `msrv`
# CI matrix keeps the number honest for `cargo install`.
rust-version = "1.99"
license = "MIT OR Apache-2.0"
repository = "https://github.com/AprilNEA/OpenLogi"
authors = ["AprilNEA <dev@aprilnea.me>"]
description = "Lightweight, local-first alternative to Logitech Options+ for HID++ devices"

[workspace.dependencies]
hidpp = { package = "openlogi-hidpp", path = "crates/openlogi-hidpp", version = "0.9.0" }
openlogi-device-registry = { path = "crates/openlogi-device-registry", version = "0.9.0" }
openlogi-fixture = { path = "crates/openlogi-fixture", version = "0.9.0" }
async-hid = { package = "openlogi-async-hid", version = "=0.5.3-openlogi.1" }
interprocess = { version = "2", features = ["tokio"] }
# The agent <-> GUI RPC layer itself, over the `interprocess` transport above.
# 0.38 is a hard floor: earlier releases hard-depend on opentelemetry 0.30 (not
# feature-gated — google/tarpc#564), which drags the vulnerable
# opentelemetry_sdk 0.30 into the graph (GHSA-w9wp-h8wv-79jx).
tarpc = { version = "0.38", features = ["serde1", "serde-transport", "serde-transport-bincode", "tokio1"] }
windows-sys = "0.61"
tokio = { version = "1", default-features = false, features = ["rt", "macros", "sync", "time"] }
futures-lite = "2"
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"
ureq = { version = "3", default-features = false, features = ["rustls", "platform-verifier", "json"] }
sha2 = "0.10"
atomic-write-file = "0.3.0"
backon = { version = "1.6", default-features = false, features = ["std", "std-blocking-sleep"] }
clap = { version = "4", features = ["derive", "env"] }
anyhow = "1"
thiserror = "2"
num_enum = "0.7.3"
tracing = "0.1"
tracing-subscriber = { version = "0.3", default-features = false, features = ["fmt", "env-filter"] }
buffa = "0.9"
hkdf = "0.12"
mdns-sd = "0.21"
quinn = { version = "0.11", default-features = false, features = ["runtime-tokio", "rustls-ring"] }
rcgen = { version = "0.14", default-features = false, features = ["crypto", "ring"] }
rustls = { version = "0.23", default-features = false, features = ["ring", "std"] }
subtle = "2"
x509-parser = { version = "0.18", default-features = false }
core-graphics = { version = "0.25", default-features = false, features = ["link"] }
core-foundation = { version = "0.10", default-features = false, features = ["link"] }
opener = "0.8.5"
shellexpand = "3.1.2"
evdev = "0.13"
# Kept on one version across the workspace (block2 included) so a resolve can't
# move gpui's Cargo.lock pin out from under the GUI.
objc2 = "0.6.4"
objc2-app-kit = "0.3.2"
objc2-foundation = "0.3.2"
objc2-core-foundation = { version = "0.3.2", default-features = false }
objc2-application-services = { version = "0.3.2", default-features = false }
objc2-core-graphics = { version = "0.3.2", default-features = false }
objc2-io-kit = { version = "0.3.2", default-features = false }
objc2-service-management = { version = "0.3.2", default-features = false }
objc2-security = { version = "0.3.2", default-features = false }
block2 = "0.6.2"
dispatch2 = "0.3.1"
# The macOS privacy-grant notifications the hook's probe cue and the agent's
# grant watchers wake on; compiles to a heartbeat-only watch elsewhere.
axwatch = "0.1"

# Version-aligned GPUI snapshots. Keep the core and platform on one release so
# the desktop, overlay, and their integrations share the same GPUI types.
gpui = { package = "gpui-pre", version = "=0.3.10" }
gpui_platform = { package = "gpui-pre-platform", version = "=0.3.10", features = ["font-kit", "x11", "wayland"] }
# Keep Kit on a release checkout: build.rs embeds its repository-level themes.
# Use the default upstream GPUI backend, without the experimental gpui-fast feature.
gpui-kit = { git = "https://github.com/longbridge/gpui-kit", tag = "v0.8.1" }

swr-core = "0.1"
swr-gpui = { package = "swr-gpui-pre", version = "0.1" }

[workspace.lints.rust]
# Denied workspace-wide, but `deny` (not `forbid`) so a crate that genuinely
# needs FFI can opt in locally with `#[expect(unsafe_code, reason = "…")]`.
unsafe_code = "deny"

[workspace.lints.clippy]
pedantic = { level = "warn", priority = -1 }
unwrap_used = "warn"
expect_used = "warn"
missing_errors_doc = "allow"
doc_markdown = "allow"
# Pedantic since clippy 1.99. Its rewrite, `assert_eq!(v, [] as [T; 0])`, prints
# the leftover on failure, but the cast and the `Debug + PartialEq` bound on every
# element type cost the tests more than that message is worth.
assert_is_empty = "allow"
# Machine-checks the suppression policy in .claude/rules/rust.md: every
# suppression states a reason, and reaches for `expect` unless it cannot work.
# `allow_attributes` only sees outer `#[allow]`. The module-wide `#![allow(…)]`
# it cannot see — the shape that rots worst — is rejected by the ast-grep guard
# `workspace-no-inner-allow` in the root .ast-grep/rules/. An `allow` that
# stops suppressing anything stays quiet; `stale-allows.yml` sweeps for those.
allow_attributes = "warn"
allow_attributes_without_reason = "warn"
# Shared lint set, kept in sync with
# https://gist.github.com/AprilNEA/cdf81f76840fcb883a32503ee7caa539.
# `cast_*` and `ptr_as_ptr` are pedantic members already; they are listed
# explicitly so the set stands on its own if the pedantic group ever moves.
assertions_on_result_states = "warn"
cast_possible_truncation = "warn"
cast_possible_wrap = "warn"
cast_sign_loss = "warn"
error_impl_error = "warn"
exit = "warn"
or_fun_call = "warn"
ptr_as_ptr = "warn"
tests_outside_test_module = "warn"
undocumented_unsafe_blocks = "warn"

[profile.dev]
debug = "limited"

[profile.dev.package."*"]
debug = false

# `cargo xtask linux package` runs a dev build and spends most of its time in
# these two C codecs, re-encoding ~100 MB per package (xtask only). Unoptimised,
# they made the run take 285 s instead of 178 s.
[profile.dev.package.liblzma-sys]
opt-level = 3

[profile.dev.package.zstd-sys]
opt-level = 3

[profile.release]
lto = "fat"
codegen-units = 1
strip = "symbols"