Cargo.toml

[workspace]
resolver = "2"

members = [
  "crates/activity",
  "crates/agent", "crates/agent_egress", "crates/agent_fold",
  "crates/agent_harness",
  "crates/agent_inmem",
  "crates/agent_runtime_protocol", "crates/agent_session",
  "crates/agent_trigger",
  "crates/ai_projections",
  "crates/ai_usage",
  "crates/bot_id",
  "crates/bot_token",
  "crates/bots",
  "crates/broadcast",
  "crates/calendar_events",
  "crates/channel_bots",
  "crates/client/cache-core",
  "crates/client/cache-turso",
  "crates/client/cache-wasm",
  "crates/client/turso-opfs",
  "crates/coding_agent_worker",
  "crates/collab_surface",
  "crates/complete_graph",
  "crates/cowlike",
  "crates/crm",
  "crates/cursor_api_key",
  "crates/cursor_cloud_agents",
  "crates/embedding",
  "crates/email_api_client",
  "crates/entity_mutation",
  "crates/favorites",
  "crates/foreign_entity",
  "crates/generic_email_domains",
  "crates/gmail_client",
  "crates/graphql_activity",
  "crates/graphql_channel",
  "crates/graphql_common",
  "crates/graphql_email",
  "crates/graphql_entity_mutation",
  "crates/graphql_favorite",
  "crates/graphql_notification",
  "crates/graphql_permission",
  "crates/graphql_properties",
  "crates/graphql_soup",
  "crates/graphql_soup_filter_input",
  "crates/harness_id",
  "crates/harness_token",
  "crates/harnesses",
  "crates/import",
  "crates/item_filter_index",
  "crates/integration_tests/local_e2e",
  "crates/loops_client",
  "crates/macro_authorization",
  "crates/macro_config",
  "crates/macro_event_broker",
  "crates/macro_event_topics",
  "crates/macro_queues",
  "crates/macro_sync_service_jwt",
  "crates/maybe_send",
  "crates/memory",
  "crates/mcp_select",
  "crates/mcp_toolset",
  "crates/pipedream_mcp",
  "crates/onboarding",
  "crates/predicate_index",
  "crates/prompt",
  "crates/properties_service",
  "crates/reminders",
  "crates/search_service",
  "crates/skills",
  "crates/soup_filter_cache_adapter",
  "crates/soup_filter_projection",
  "crates/soup_realtime",
  "crates/system_skills",
  "crates/task_dedup",
  "crates/unfurl",
  "crates/user_api_key",
  "crates/webhook_signature",
  "crates/worker-rs-otel",
  "crates/workspace-hack",
  "services/agent_harness_service",
  "services/agent_trigger_service",
  "services/ai_projections_refresh_handler",
  "services/authentication_service",
  "services/call_recording_preview_handler",
  "services/connection_gateway",
  "services/contacts_service",
  "services/convert_service",
  "services/dataloss_prevention_handler",
  "services/delete_chat_handler",
  "services/deleted_item_poller",
  "services/document_cognition_service",
  "services/document_cognition_service/load-test",
  "services/document_storage_service",
  "services/document_text_extractor",
  "services/document_upload_finalizer_handler",
  "services/docx_unzip_handler",
  "services/email_refresh_handler",
  "services/email_scheduled_handler",
  "services/email_service",
  "services/email_sfs_delete_handler",
  "services/email_suppression_handler",
  "services/image_optimizer",
  "services/image_proxy_service",
  "services/mcp_auth_proxy",
  "services/mcp_service",
  "services/notification_service",
  "services/organization_retention_handler",
  "services/organization_retention_trigger",
  "services/scheduled_action",
  "services/search_processing_service",
  "services/search_upload_handler",
  "services/sha_cleanup_worker",
  "services/static_file_service",
  "services/sync-service",
  "services/sync-service/bebop-schema",
  "services/unfurl_service",
  "services/upload_extractor_lambda_handler",
  "services/upload_extractor_lambda_trigger",
  "services/user_link_cleanup_handler",
  "services/worker_trigger",
  "tooling/native_app_server",
  "tooling/notification_sandbox",
  "tooling/seed_cli",
  "tooling/xtask",
  "tooling/xtask/crates/*",
]

[workspace.dependencies]
aes-gcm = { version = "0.10.3", features = ["zeroize"] }
anyhow = "1.0.100"
apollo-compiler = "1"
apollo-parser = "0.8"
# Locally forked (see third_party/README.md). Defaults off so the fold's
# dependency chain stays wasm-reachable; whoever spawns an agent as a
# subprocess asks for `features = ["subprocess"]`.
# Pinned past the v2.0.0 tag to pick up wasm32 support (PR #294, merged to
# main but not yet in a tagged release):
# https://github.com/agentclientprotocol/rust-sdk/pull/294
# Swap back to a plain version once upstream cuts a release containing it.
agent-client-protocol = { git = "https://github.com/agentclientprotocol/rust-sdk", rev = "8769d16d10e0c9fa7e662ee18424a4313b06ea88" }
arboard = { version = "3.6.1", default-features = false, features = ["wayland-data-control"] }
askama = "0.14"
async-graphql = "7.2.1"
async-lock = "3"
async-openai = { version = "0.36.1", features = [
  "byot",
  "chat-completion",
  "completions",
  "embedding",
] }
async-stream = "0.3.6"
async-trait = "0.1.86"
automod = "1"
aws-config = { version = "1.8.16", features = ["behavior-version-latest"] }
aws-msk-iam-sasl-signer = "1.0.1"
aws-sdk-dynamodb = "1.111.0"
aws-sdk-kms = "1.104.0"
aws-sdk-lambda = "1.122.0"
aws-sdk-s3 = "1.132.0"
aws-sdk-secretsmanager = "1.104.0"
aws-sdk-sesv2 = "1.118.0"
aws-sdk-sns = "1.99.0"
aws-sdk-sqs = "1.98.0"
aws-smithy-types = "1.4.7"
aws-types = "1"
aws_lambda_events = { version = "0.16.0", default-features = false }
axum = { version = "0.8", features = ["tower-log"] }
axum-extra = { version = "0.10" }
base64 = "0.22.1"
bebop = "3.1.3"
cached = { version = "0.54.0", features = ["async_tokio_rt_multi_thread"] }
chrono = { version = "0.4.39", features = ["serde"] }
chrono-tz = { version = "0.10.4", features = ["serde"] }
clap = { version = "4.5.20", features = ["derive"] }
cloudfront_sign = "0.3.0"
constant_time_eq = "0.3.1"
crossterm = "0.28"
cookie = "0.18.1"
cron = "0.16.0"
csv = "1"
dashmap = "6.1.0"
dateparser = "0.2.1"
determinator = "0.12.0"
dotenvy = "0.15.7"
ego-tree = "0.6.2"
either = "1"
eventsource-stream = "0.2.3"
futures = "0.3.31"
getrandom = "0.3"
glob = "0.3.3"
# Pinned engine for the generated dependency artifacts (used by the xtask
# graph/deps commands). This version lives in Cargo.lock, so dev machines and
# CI always run the identical generator; guppy is pinned to the version the
# hakari release is built against.
guppy = "0.17.24"
hex = "0.4.3"
hmac = "0.12.1"
encoding_rs = "0.8"
http = "1"
http-body-util = "0.1.2"
httpdate = "1"
image = "0.25"
indexmap = "2"
indoc = "2"
inquire = "0.7"
itertools = "0.14"
jsonwebtoken = { git = "https://github.com/whutchinson98/jsonwebtoken", features = [
  "rust_crypto",
] }
lambda_runtime = "0.13.0"
lazy-regex = "3.6.1"
lazy_static = "1.5.0"
livekit-api = { version = "0.4.16", default-features = false, features = [
  "access-token",
  "rustls-tls-webpki-roots",
  "services-tokio",
  "webhooks",
] }
livekit-protocol = "0.7.2"
log = "0.4.26"
lol_html = "2.4.0"
lru = "0.16"
mockall = "0.13"
nom = "8"
opentelemetry = { version = "0.31.0", default-features = false }
opentelemetry-appender-tracing = { version = "0.31.1", default-features = false }
opentelemetry-http = { version = "0.31.0", default-features = false }
opentelemetry-otlp = { version = "0.31.0", default-features = false, features = [
  "grpc-tonic",
  "internal-logs",
  "logs",
  "metrics",
  "trace",
] }
opentelemetry_sdk = { version = "0.31.0", default-features = false }
ordered-float = "5"
paste = "1"
pdfium-render = { version = "0.8.37", default-features = false, features = [
  "pdfium_7543",
  "thread_safe",
] }
pgvector = { version = "0.4", features = ["postgres", "sqlx"] }
postcard = { version = "1", features = ["use-std"] }
pollster = "0.4"
quote = "1"
rand = "0.9.0"
ratatui = "0.29"
# uses vendored to fix lambda builds failing.
rdkafka = { version = "0.37", default-features = false, features = [
  "cmake-build",
  "libz-static",
  "ssl-vendored",
  "tokio",
] }
readonly = "0.2"
recursion = "0.5.4"
redis = "1.0.3"
regex = "1.11.1"
reqwest = { version = "0.13", default-features = false, features = [
  "form",
  "hickory-dns",
  "json",
  "rustls",
] }
rmcp = "1.6.0"
sse-stream = "0.2"
rootcause = { version = "0.12", features = ["compat-anyhow1"] }
rustls = { version = "0.23", default-features = false, features = ["aws_lc_rs"] }
rootcause-tracing = "0.12.1"
schemars = { version = "1.0.4", features = ["chrono04", "uuid1"] }
semver = { version = "1", features = ["serde"] }
serde = { version = "1.0.214", features = ["derive"] }
serde-wasm-bindgen = "0.6"
serde_dynamo = { version = "4", features = ["aws-sdk-dynamodb+1"] }
serde_json = { version = "1.0.132" }
serde_repr = "0.1"
serde_with = { version = "3.12.0", features = ["base64"] }
serde_yaml = "0.9"
shell-words = "1.1.1"
specta = { version = "=2.0.0-rc.25", features = ["derive"] }
specta-serde = "=0.0.12"
specta-typescript = "=0.0.12"
sha2 = "0.10.8"
sqlx = { version = "0.8.6", features = [
  "chrono",
  "postgres",
  "runtime-tokio-rustls",
  "uuid",
] }
sqlx-core = { version = "0.8.6" }
strum = { version = "0.27.1", features = ["derive"] }
tempfile = "3"
thiserror = "2.0.0"
time = "0.3.37"
tokio = { version = "1.43.0", features = ["macros", "rt-multi-thread"] }
tokio-retry = { version = "0.3.2", default-features = false }
tokio-stream = { version = "0.1.17" }
tokio-tungstenite = { version = "0.28", default-features = false, features = [
  "connect",
  "rustls-tls-webpki-roots",
] }
tokio-util = "0.7.13"
tower = { version = "0.5.1", features = ["util"] }
tower-http = { version = "0.6.1", features = [
  "compression-gzip",
  "cors",
  "trace",
] }
toml = "0.8"
toml_edit = "0.22"
tracing = "0.1.44"
tracing-opentelemetry = "0.32.1"
tracing-subscriber = { version = "0.3.22", features = ["env-filter", "json"] }
tracing-tree = "0.4.0"
tui-input = { version = "0.14.0", default-features = false }
# Pin the official upstream revision used by the browser cache. Cache writes use
# deferred transactions so browser WASM does not initialize Turso's temp database.
turso_core = { git = "https://github.com/tursodatabase/turso", rev = "79163249538197d01dec5ea7f65519454ed792e2", default-features = false }
tungstenite = { version = "0.28", features = ["url"] }
unsynn = "0.3"
urlencoding = "2.1.3"
utoipa = { version = "5.4.0", features = [
  "axum_extras",
  "chrono",
  "repr",
  "uuid",
] }
utoipa-swagger-ui = { version = "9", features = ["axum", "vendored"] }
uuid = { version = "1.15.1", features = ["fast-rng", "serde", "v4", "v5", "v7"] }
wiremock = "0.6.5"
zeroize = "1.8.2"
# worker-build (see services/sync-service/wrangler.toml) refuses to build against
# anything older than 0.2.123, so keep this floor above that.
wasm-bindgen = "0.2.123"
wasm-bindgen-futures = "0.4"
wasm-bindgen-test = "0.3"
web-sys = "0.3"
web-time = "1.1.0"
webbrowser = { version = "=1.2.2", features = ["hardened"] }
worker = "0.8.1"
# this is pinned to match axum 0.7.9 dependency requirements
async-stripe = { version = "0.41", default-features = false, features = [
  "billing",
  "checkout",
  "runtime-tokio-hyper-rustls-webpki",
] }
axum-macros = "0.5"
bytes = "1.11.1"
bzip2 = { version = "0.5.1", default-features = false, features = [
  "libbz2-rs-sys",
] }
derive_builder = "0.20.2"
doppleganger = "0.5"
doppler-config = "0.1.2"
js-sys = "0.3"
once_cell = "1.21.3"
scraper = "0.18"
serde_urlencoded = "0.7.1"
strum_macros = "0.27.1"
unicode-segmentation = "1.9.0"
url = "2.5.0"
zip = "=2.4.2"
ammonia = "4.1.4"
html-escape = "0.2"
subtle = "2.6.1"

# Retain Rust DWARF for local cache profiling while keeping release-level LLVM
# optimization. wasm-pack's custom profile metadata prevents the final
# wasm-opt pass from discarding or rewriting these locations.
[profile.cache-wasm-profiling]
inherits = "release"
debug = 2
strip = "none"

# The Cloudflare sync worker is size-sensitive. Package manifests cannot own
# profiles once they are workspace members, so keep its former release profile
# here without changing release optimization for the backend services.

[profile.sync-service-release]
inherits = "release"
lto = true
opt-level = "s"