Cargo.toml

[package]
name = "openresearch-cli"
version = "0.2.1"
edition = "2021"
description = "OpenResearch CLI (orx) — Rust port"
repository = "https://github.com/alphaXiv/OpenResearch"
license = "MIT"

[[bin]]
name = "orx"
path = "src/main.rs"

[dependencies]
tokio = { version = "1", features = ["rt-multi-thread", "macros", "net", "io-util", "io-std", "time", "fs", "process", "sync", "signal"] }
tokio-util = { version = "0.7", features = ["io"] }
# rustls instead of the default native-tls: avoids an OpenSSL dependency so the
# static musl Linux builds link cleanly (native-tls/openssl won't build for musl).
reqwest = { version = "0.12", default-features = false, features = ["json", "charset", "http2", "rustls-tls", "stream"] }
clap = { version = "4", features = ["derive"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"
anyhow = "1"
dirs = "5"
# bundled: compiles SQLite from source so the static musl builds link cleanly
# (same reasoning as rustls above — no system library dependency).
rusqlite = { version = "0.32", features = ["bundled"] }
urlencoding = "2"
uuid = { version = "1", features = ["v4"] }
semver = "1"
fd-lock = "4"
base64 = "0.22"
# Extract user-uploaded skills shipped as a .zip of a SKILL.md folder. Lean:
# deflate only, no bzip2/zstd/time/aes.
zip = { version = "2", default-features = false, features = ["deflate"] }
# `orx up` dashboard: axum for routing/SSE, rust-embed for the SPA, futures for
# the stream plumbing. TLS-free, so the rustls-only musl build stays intact.
axum = { version = "0.8", features = ["ws"] }
hyper = { version = "1", features = ["client", "http1"] }
hyper-util = { version = "0.1", features = ["tokio"] }
rust-embed = "8"
futures = "0.3"
portable-pty = "0.9"
# async fns in the Harness trait (object-safe `dyn Harness` in the registry).
async-trait = "0.1"
sha2 = "0.10"
# Import the Overleaf editor session cookie from a local browser store, so the
# user need not paste it. Chromium on macOS encrypts cookies with AES-128-CBC
# under a Keychain-held key (PBKDF2-HMAC-SHA1). Pure-Rust RustCrypto crates, so
# the static musl builds are untouched.
aes = "0.8"
cbc = "0.1"
pbkdf2 = { version = "0.12", default-features = false, features = ["hmac"] }
sha1 = "0.10"
# Overleaf live sync speaks the editor's socket.io channel. rustls + webpki
# roots for the same musl reasons as reqwest above; already in the tree via axum.
tokio-tungstenite = { version = "0.29", features = ["rustls-tls-webpki-roots"] }

# File identity for Windows' hard-link fallback (native_store.rs); already in the tree via walkdir.
same-file = "1.0"

[target.'cfg(unix)'.dependencies]
# Free-space pre-check for the data-dir move (statvfs). Already in the tree
# transitively; taken as a direct dep only on unix, where we call it.
libc = "0.2"

[target.'cfg(windows)'.dependencies]
# Win32 calls std lacks: run liveness, console ownership, the error dialog. Already in the tree.
windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_System_Threading", "Win32_System_Console", "Win32_UI_WindowsAndMessaging"] }

[target.'cfg(target_os = "macos")'.dependencies]
# macOS `.app` mode (src/commands/app.rs): an NSApplication + delegate run loop
# on the main thread so the downloadable app gets a Dock icon and click handling
# while the dashboard server runs on background threads. macOS-only so the
# static musl Linux builds are untouched.
objc2 = "0.6"
objc2-app-kit = { version = "0.3", default-features = false, features = ["std", "NSApplication", "NSResponder", "NSRunningApplication", "NSWorkspace"] }
# Default-browser lookup for the Dock-click handler (NSWorkspace takes NSURLs).
objc2-foundation = { version = "0.3", default-features = false, features = ["std", "NSArray", "NSEnumerator", "NSURL", "NSString"] }

# The profile that 'dist' will build with
[profile.dist]
inherits = "release"
lto = "thin"