Cargo.toml

[workspace]
resolver = "2"
members = ["crates/*"]
exclude = ["agents/*"]

[workspace.package]
version = "0.4.1"
edition = "2021"
rust-version = "1.85"
license = "Apache-2.0 OR MIT"
authors = ["Q. T. Felix <qtfelix@qu4nt.space>"]
repository = "https://github.com/Quant-Off/lumen"
homepage = "https://github.com/Quant-Off/lumen"
description = "High-security verifiable Rust AI-agent framework for zero-trust / air-gapped environments"
keywords = ["ai", "agent", "security", "wasm", "zkml"]
categories = ["wasm", "cryptography", "command-line-utilities"]

[workspace.dependencies]
# In-workspace crates
lumen-core = { path = "crates/lumen-core", version = "0.4.1" }
lumen-fixed = { path = "crates/lumen-fixed", version = "0.4.1" }
lumen-capability = { path = "crates/lumen-capability", version = "0.4.1" }
lumen-channel = { path = "crates/lumen-channel", version = "0.4.1" }
lumen-provenance = { path = "crates/lumen-provenance", version = "0.4.1" }
lumen-defense = { path = "crates/lumen-defense", version = "0.4.1" }
lumen-zkml = { path = "crates/lumen-zkml", version = "0.4.1" }
lumen-inference = { path = "crates/lumen-inference", version = "0.4.1" }
lumen-sandbox = { path = "crates/lumen-sandbox", version = "0.4.1" }
lumen-agent = { path = "crates/lumen-agent", version = "0.4.1" }
lumen-orchestrator = { path = "crates/lumen-orchestrator", version = "0.4.1" }
lumen-sdk = { path = "crates/lumen-sdk", version = "0.4.1" }
lumen-sdk-macros = { path = "crates/lumen-sdk-macros", version = "0.4.1" }
lumen-attestation = { path = "crates/lumen-attestation", version = "0.4.1" }
lumen-onchain = { path = "crates/lumen-onchain", version = "0.4.1" }

# Errors / utilities
thiserror = "2"
anyhow = "1"

# Async runtime
tokio = { version = "1", default-features = false, features = ["rt-multi-thread", "macros", "sync", "time", "io-util", "fs"] }
async-trait = "0.1"
futures = "0.3"

# Serialization
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"
# default features (`heapless-cas`) 가 unmaintained `atomic-polyfill` 을 끌어옴.
# alloc/std 만 활성화해 의존 그래프에서 heapless 자체를 제거.
postcard = { version = "1", default-features = false, features = ["use-std"] }
hex = "0.4"

# Crypto
blake3 = "1"
ed25519-dalek = { version = "2", features = ["rand_core"] }
rand = "0.8"
rand_core = "0.6"
subtle = "2"

# Defense / matchers
aho-corasick = "1"
regex = "1"
once_cell = "1"
globset = "0.4"

# Concurrency
parking_lot = "0.12"

# WASM (sandbox)
# v25 → 최신 line. RUSTSEC 다수 advisory (fd_renumber / wasi:http fields /
# 컴포넌트 model flags lift / Winch table.fill / UTF-16 transcoding panic) 패치 포함.
wasmtime = { version = "44", default-features = false, features = ["async", "cranelift", "runtime", "addr2line", "demangle"] }
wat = "1"

# Provenance — candle-onnx 가 0.7 을 끌어오므로 동일 메이저로 정렬해 dup 회피.
safetensors = "0.7"

# CLI
clap = { version = "4", features = ["derive"] }

# Logging / audit
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["fmt", "env-filter"] }

# Optional crypto-channel feature
aes-gcm = "0.10"
x25519-dalek = { version = "2", features = ["static_secrets"] }

# Dev / bench
criterion = "0.5"

# halo2 (ZK 회로) - 매우 무거운 의존성. feature 뒤에서만 활성화.
halo2_proofs = "0.3"
ff = "0.13"
pasta_curves = "0.5"

# candle (LLM 추론) - feature 뒤에서만 활성화. CPU 전용 빌드.
candle-core = { version = "0.10", default-features = false }
candle-onnx = { version = "0.10", default-features = false }
# candle-transformers: 실제 LLM 아키텍처 (LLaMA, Mistral, GPT-2 등). CPU 전용.
candle-transformers = { version = "0.10", default-features = false }
# HuggingFace 토크나이저 (tokenizer.json 형식).
# onig 는 C 소스에서 빌드되므로 시스템 라이브러리 불필요.
tokenizers = { version = "0.19" }

[workspace.lints.rust]
unsafe_code = "deny"
missing_docs = "warn"
unreachable_pub = "warn"
rust_2018_idioms = { level = "warn", priority = -1 }

[workspace.lints.clippy]
# Q. T. Felix NOTE: `all` 그룹(정확성/의심/스타일/복잡성/성능)이 기본 게이트웨이입니다.
#                   CI의 `-D warnings` 설정이 코드 퇴보를 거부할 수 있도록 해당 항목들을 경고(warn)로 처리합니다.
#                   `pedantic` 그룹은 실제 문제를 가릴 정도로 노이즈가 심하기 때문에 워크스페이스 전체에 활성화하지 않았습니다.
#                   엄격한 감사가 필요한 크레이트는 개별적으로 해당 설정을 추가할 수 있습니다.
all = { level = "warn", priority = -1 }
undocumented_unsafe_blocks = "warn"

[profile.release]
opt-level = 3
lto = "thin"
codegen-units = 1
panic = "abort"
strip = "symbols"

[profile.release-debug]
inherits = "release"
debug = true
strip = "none"