Cargo.toml

[package]
name = "solilang"
version = "1.0.3"
edition = "2021"
description = "A dynamically-typed, class-based OOP language with optional type annotations and pipeline operators"
authors = ["Solilang Team"]
license = "MIT"
repository = "https://github.com/solisoft/soli_lang"

exclude = ["www"]

[[bin]]
name = "soli"
path = "src/main.rs"

[features]
default = []
# Coverage is now always enabled at runtime via --coverage flag
full = []

[dependencies]
thiserror = "1.0"
colored = "2.1"
dirs = "5.0"

# Memory allocator - much better RSS behavior than glibc for multi-threaded apps
mimalloc = { version = "0.1", default-features = false }

# Decimal type for financial calculations
rust_decimal = { version = "1.34", features = ["std", "serde"] }

# TUI support
ratatui = "0.26"
crossterm = "0.28"
gag = "1.0"

# HTTP support
reqwest = { version = "0.12", features = ["json", "rustls-tls", "blocking", "cookies", "multipart", "stream"], default-features = false }
ureq = { version = "2.9", features = ["json"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
sonic-rs = "0.3"
itoa = "1"
ryu = "1"

# High-performance async HTTP server
hyper = { version = "1.4", features = ["server", "http1"] }
hyper-util = { version = "0.1", features = ["tokio", "server", "server-auto"] }
http-body-util = "0.1"
tokio = { version = "1", features = ["rt-multi-thread", "sync", "macros", "net", "time", "process"] }
tokio-stream = "0.1"
tokio-tungstenite = "0.24"
hyper-tungstenite = "0.15"
bytes = "1.11.1"
uuid = { version = "1", features = ["v4", "serde"] }
tungstenite = "0.24"
lazy_static = "1.4"
lru = "0.12"
futures-util = "0.3"
crossbeam = "0.8"

# Cryptography
argon2 = { version = "0.5", features = ["std", "rand"] }
curve25519-dalek = "4"
rand_core = "0.6"
sha2 = "0.10"
md-5 = "0.10"
hmac = "0.12"
sha1 = "0.10"

# Data encoding
base64 = "0.22"
rmp-serde = "1"

# Validation
regex = "1"
chrono = { version = "0.4", features = ["std"] }

# Request body parsing
multer = "3"

# JWT support
jsonwebtoken = "9"

# VAPID / Web Push (RFC 8291 / 8292): P-256 ECDH+ECDSA, HKDF, AES-128-GCM.
p256 = { version = "0.13", features = ["ecdh", "ecdsa"] }
hkdf = "0.12"
aes-gcm = "0.10"

# LiveView support
diff = "0.1.13"
async-channel = "2.3"

# Daemonize (Unix only)
daemonize = "0.5"
nix = { version = "0.29", features = ["signal", "process"] }

# Used for Unix-only `O_NOFOLLOW` open flag in the file builtins (SEC-006a).
# Already a transitive dep via tokio/etc; promoting it to a direct dep so the
# constant is reachable without depending on a specific transitive's exports.
libc = "0.2"

# Ordered hash map with O(1) lookups
indexmap = "2"

# Fast, non-cryptographic hasher for IndexMap (3-5x faster than SipHash)
ahash = "0.8"

# File watching for hot reload
notify = "7"

# Test framework
walkdir = "2"
serde_yaml = "0.9"
rand = "0.8"
glob = "0.3"
urlencoding = "2"
url = "2"

# XML support for SOAP
quick-xml = { version = "0.36", features = ["serialize"] }

# Markdown rendering for .md views
pulldown-cmark = "0.12"

# HTML sanitizer — real html5ever-based parser for `sanitize_html`.
# SEC-024: replaces a prior substring-scanner that was bypassed by
# entity-encoded attributes, unquoted attributes, SVG sub-trees, etc.
ammonia = "4"

# S3 support
rusoto_s3 = "0.48"
rusoto_core = "0.48"
rusoto_credential = "0.48"

# Archive extraction for git archive
flate2 = "1.0"
tar = "0.4"
tempfile = "3"

# Image processing (pure Rust, no system deps)
# Default features pull in AVIF (rav1e+ravif ~1.7MB) and EXR/HDR which Soli does not use.
# Enable only the formats referenced in src/interpreter/builtins/image.rs.
image = { version = "0.25", default-features = false, features = ["jpeg", "png", "gif", "bmp", "ico", "tiff", "webp", "rayon"] }

# Spreadsheet support (CSV and Excel)
calamine = "0.26"
csv = "1.3"
umya-spreadsheet = "1.0"

# Pinned transitive dependency to fix RUSTSEC-2026-0009
time = ">=0.3.47"

# SSH support for deploy
ssh2 = "0.9"

[dev-dependencies]
pretty_assertions = "1.4"
criterion = { version = "0.5", features = ["html_reports"] }

[[bench]]
name = "interpreter"
harness = false

[[bench]]
name = "vm"
harness = false

[[bench]]
name = "collections_perf"
harness = false

[profile.release]
opt-level = 3
lto = "fat"
codegen-units = 1
panic = "abort"
strip = "symbols"

[profile.bench]
opt-level = 3
lto = "fat"
codegen-units = 1