Cargo.toml

# Copyright (c) 2025 Cloudflare, Inc. All rights reserved.
# SPDX-License-Identifier: BSD-3-Clause

[workspace]
# This is needed to avoid pulling in tokio features in wasm targets, due to new features in version 0.0.18 of the `worker` crate
# See: https://doc.rust-lang.org/edition-guide/rust-2021/default-cargo-resolver.html#details
resolver = "2"
members = [
    "crates/bootstrap_mtc_api",
    "crates/bootstrap_mtc_worker",
    "crates/ct_worker",
    "crates/generic_log_worker",
    "crates/integration_tests",
    "crates/length_prefixed",
    "crates/mirror_worker",
    "crates/mirror_worker/config",
    "crates/sct_validator",
    "crates/signed_note",
    "crates/signed_note_wasm",
    "crates/static_ct_api",
    "crates/tlog_checkpoint",
    "crates/tlog_core",
    "crates/tlog_cosignature",
    "crates/tlog_entry",
    "crates/tlog_mirror",
    "crates/tlog_tiles",
    "crates/tlog_tiles_wasm",
    "crates/tlog_witness",
    "crates/witness_worker",
    "crates/witness_worker/config",
    "crates/x509_util",
    "fuzz",
]
# Exclude two kinds of crates from the default `cargo <cmd>` run:
#   * `integration_tests`: requires a live wrangler dev instance and will
#     hang if run without one. Invoke explicitly with, e.g.
#     `cargo test -p integration_tests --test static_ct_api`.
#   * `fuzz`: cargo-fuzz targets that depend on `libfuzzer-sys` and a
#     nightly toolchain / sanitizer runtime. Invoke explicitly with
#     `cargo fuzz run <target>`.
default-members = [
    "crates/bootstrap_mtc_api",
    "crates/bootstrap_mtc_worker",
    "crates/ct_worker",
    "crates/generic_log_worker",
    "crates/length_prefixed",
    "crates/mirror_worker",
    "crates/mirror_worker/config",
    "crates/sct_validator",
    "crates/signed_note",
    "crates/signed_note_wasm",
    "crates/static_ct_api",
    "crates/tlog_checkpoint",
    "crates/tlog_core",
    "crates/tlog_cosignature",
    "crates/tlog_entry",
    "crates/tlog_mirror",
    "crates/tlog_tiles",
    "crates/tlog_tiles_wasm",
    "crates/tlog_witness",
    "crates/witness_worker",
    "crates/witness_worker/config",
    "crates/x509_util",
]

[workspace.package]
version = "0.2.0"
authors = ["Luke Valenta <lvalenta@cloudflare.com>"]
edition = "2024"
license = "BSD-3-Clause"
readme = "README.md"
homepage = "https://github.com/cloudflare/azul"
repository = "https://github.com/cloudflare/azul"
description = "An implementation of the Static Certificate Transparency API on Cloudflare Workers"

[workspace.metadata.cargo-shear]
# getrandom is never imported directly. It is declared by the wasm crates
# solely so its `wasm_js` feature activates the correct backend for all
# transitive dependents; cargo-shear can't see this feature-only edge. A
# workspace-level ignore covers every member plus the workspace dependency
# itself.
ignored = ["getrandom", "getrandom_03"]

[profile.release]
opt-level = "s"
# Recommendations from https://developers.cloudflare.com/workers/languages/rust/#binary-size-wasm-opt:
# NOTE: `strip = true` is omitted because it strips the `target_features`
# custom section from the .wasm binary, which breaks wasm-bindgen's externref
# transform (required for catch wrappers and panic=unwind support).
# See: https://github.com/cloudflare/workers-rs/issues/1014
# `wasm-opt` (run automatically by worker-build) handles size optimization.
lto = true
codegen-units = 1

[profile.release-symbols]
inherits = "release"
opt-level = 3
debug = 1

[workspace.dependencies]
# aes-gcm-siv has no stable release on the current RustCrypto trait
# batch (aead 0.6), so it stays on a pre-release (as does rsa, below);
# the rc still resolves aead/cipher up to their stable releases.
aes-gcm-siv = { version = "0.12.0-rc.3", default-features = false, features = ["aes", "alloc"] }
anyhow = "1.0"
axum = { version = "0.8", default-features = false, features = ["json", "matched-path"] }
base64 = "0.22"
base64ct = "1.8.0"
bitcode = { version = "0.6.6", features = ["serde"] }
byteorder = "1.5"
chrono = { version = "0.4", features = ["serde"] }
console_error_panic_hook = "0.1.1"
console_log = { version = "1.0" }
criterion = { version = "0.5", features = ["html_reports"] }
crypto-common = "0.2"
digest = "0.11"
csv = "1.3.1"
generic_log_worker = { path = "crates/generic_log_worker", version = "0.2.0" }
der = { version = "0.8", features = ["oid"] }
# NOTE: rsa has no stable release on the current RustCrypto trait batch
# (crypto-common 0.2 / signature 3.0), so it remains pinned to a pre-release.
# The rest of the batch is now stable.
ed25519-dalek = { version = "3.0.0", features = ["pem"] }
flate2 = { version = "1", default-features = false, features = ["rust_backend"] }
futures-executor = "0.3.31"
futures-util = "0.3.31"
getrandom = { version = "0.4", features = ["wasm_js"] }
# getrandom 0.3 is needed for sentry-core's transitive dep: sentry-types -> rand 0.9 -> getrandom 0.3
getrandom_03 = { package = "getrandom", version = "0.3", features = ["wasm_js"] }
hex = "0.4"
itertools = "0.14.0"
jsonschema = "0.30"
length_prefixed = { path = "crates/length_prefixed" }
libfuzzer-sys = "0.4"
log = { version = "0.4" }
ml-dsa = "0.1.1"
bootstrap_mtc_api = { version = "0.2.0", path = "crates/bootstrap_mtc_api" }
p256 = { version = "0.14.0", features = ["ecdsa"] }
p384 = { version = "0.14.0", features = ["ecdsa"] }
p521 = { version = "0.14.0", features = ["ecdsa"] }
parking_lot = "0.12"
prometheus = "0.14"
rand = "0.10"
rand_core = "0.10"
sentry-core = { version = "0.48", default-features = false, features = ["client"] }
serde = { version = "1.0", features = ["derive"] }
serde-wasm-bindgen = "0.6.5"
serde_bytes = "0.11"
serde_json = "1.0"
serde_with = { version = "3.9.0", features = ["base64"] }
sha1 = { version = "0.11", features = ["oid"] }
sha2 = "0.11"
signature = "3.0.0"
signed_note = { path = "crates/signed_note", version = "0.2.0" }
static_ct_api = { path = "crates/static_ct_api", version = "0.2.0" }
thiserror = "2.0"
tlog_checkpoint = { path = "crates/tlog_checkpoint", version = "0.2.0" }
tlog_core = { path = "crates/tlog_core", version = "0.2.0" }
tlog_cosignature = { path = "crates/tlog_cosignature", version = "0.2.0" }
tlog_entry = { path = "crates/tlog_entry", version = "0.2.0" }
tlog_mirror = { path = "crates/tlog_mirror", version = "0.2.0" }
tlog_tiles = { path = "crates/tlog_tiles", version = "0.2.0" }
tlog_witness = { path = "crates/tlog_witness", version = "0.2.0" }
tokio = { version = "1", features = ["sync"] }
tower-service = "0.3.3"
reqwest = { version = "0.12", features = ["json"] }
url = "2.2"
wasm-bindgen = "0.2"
worker = "0.8.5"
x509-cert = "0.3.0"

x509_util = { path = "crates/x509_util" }
sct_validator = { path = "crates/sct_validator" }

# sct_validator dependencies
rsa = { version = "0.10.0-rc.18", default-features = false, features = ["sha2", "encoding"] }
hashbrown = "0.15"
spki = "0.8"
const-oid = "0.10"
pkcs8 = { version = "0.11.0", features = ["pem"] }