[package]
license = "Apache-2.0"
name = "kigi-shell"
version.workspace = true
edition.workspace = true

[features]
default = []
unstable = []
default-bazel = [
    ]

[dependencies]
dunce = { workspace = true }
tonic-prost = { workspace = true, optional = true }
agent-client-protocol = { workspace = true }
anyhow = { workspace = true }
kigi-prompt-queue = { workspace = true }
kigi-version = { workspace = true }

async-openai = { workspace = true }
async-trait = { workspace = true }
blake3 = { workspace = true }
bm25 = "2.3"
bytes = { workspace = true }
chrono = { workspace = true }
indexmap = { workspace = true, features = ["serde"] }
ignore = { workspace = true }
jsonschema = { workspace = true }
futures = { workspace = true }
glob = { workspace = true }
globset = { workspace = true }
kanal = "0.1"
regex = { workspace = true }
# rmcp 2.1 + reqwest 0.13 are quarantined inside `kigi-mcp`. The remaining
# MCP code in this crate (extensions/mcp.rs, mcp_doctor.rs) reaches rmcp model
# types via `kigi_mcp::rmcp::model::*`. reqwest 0.13 is a private impl
# detail of kigi-mcp::servers; shell never sees it. Every HTTP call site
# in this crate uses workspace reqwest 0.12.
kigi-mcp = { workspace = true }
reqwest = { workspace = true, features = ["stream", "blocking"] }
reqwest-middleware = { workspace = true }
# rusqlite 0.37 + bundled = self-contained SQLite (>= 3.50.2) with FTS5.
# Bumped from 0.32 to resolve CVE-2025-29087, CVE-2025-3277, CVE-2025-6965.
# sqlite-vec is C ABI, not Rust-version dependent — any rusqlite with `bundled` works.
rusqlite = { version = "0.37", features = ["bundled"] }
serde = { workspace = true }
serde_ignored = "0.1"
serde_json = { workspace = true, features = ["preserve_order"] }
similar = { workspace = true }
thiserror = { workspace = true }
clap = { workspace = true }
dirs = "6"
tokio-stream = { workspace = true }
tower-http = { workspace = true, features = ["cors"] }
toml = { workspace = true, features = ["preserve_order"] }
toml_edit = { workspace = true }
tokio = { workspace = true, features = [
    "io-std",
    "process",
    "rt",
    "macros",
    "rt-multi-thread",
    "net",
    "sync",
] }
tracing = { workspace = true }
tracing-subscriber = { workspace = true, features = [
    "env-filter",
    "fmt",
    "json",
    "time",
] }
obfstr = { workspace = true }
tokio-util = { workspace = true, features = ["compat"] }
tokio-retry = { workspace = true }
uuid = { workspace = true, features = ["v4", "v5", "v7"] }
kigi-acp-lib = { workspace = true }
axum = { workspace = true, features = ["ws", "multipart"] }
backon = { workspace = true }
webbrowser = { workspace = true }
tokio-rustls = { version = "0.26", default-features = false, features = [
    "ring",
    "logging",
    "tls12",
] }
rustls = { version = "0.23", default-features = false, features = [
    "ring",
    "logging",
    "std",
    "tls12",
] }
rustls-native-certs = "0.8"
futures-util = { workspace = true }
urlencoding = { workspace = true }
gethostname = { workspace = true }
git2 = { workspace = true }
notify = { workspace = true }
notify-debouncer-mini = { workspace = true }
nucleo = { workspace = true }
arc-swap = { workspace = true }
infer = "0.15"
image = { workspace = true, features = ["png", "jpeg", "gif", "webp"] }
moka = { workspace = true, features = ["future"] }
base64 = { workspace = true }
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
sha2 = { workspace = true }
rand = { workspace = true }
shlex = { workspace = true }
strum = { workspace = true }
kigi-fast-worktree = { path = "../kigi-fast-worktree", features = ["metadata"] }

tonic = { workspace = true, optional = true }
prost = { workspace = true, optional = true }
kigi-paths = { path = "../kigi-paths" }
kigi-shell-base = { workspace = true }
kigi-env = { workspace = true }
kigi-shell-session-support = { workspace = true }
kigi-shared = { workspace = true }
kigi-tracing-macros = { path = "../kigi-tracing-macros" }
kigi-fsnotify = { path = "../kigi-fsnotify" }
kigi-codebase-graph = { path = "../kigi-codebase-graph" }
kigi-hunk-tracker = { path = "../kigi-hunk-tracker" }
kigi-agent-lifecycle = { workspace = true }
kigi-interjection-core = { workspace = true }
kigi-sandbox = { path = "../kigi-sandbox", default-features = false }
kigi-chat-state = { path = "../kigi-chat-state" }
kigi-compaction = { path = "../../common/kigi-compaction" }
kigi-sampler = { path = "../kigi-sampler" }
kigi-sqlite-journal = { workspace = true }
kigi-token-estimation = { workspace = true }
kigi-sampling-types = { path = "../kigi-sampling-types" }
kigi-tools = { path = "../kigi-tools" }
kigi-tty-utils = { workspace = true }
kigi-system-power = { workspace = true }
kigi-workspace = { workspace = true }
kigi-subagent-resolution = { path = "../kigi-subagent-resolution" }
kigi-agent = { path = "../kigi-agent" }
kigi-config = { workspace = true }
kigi-config-types = { workspace = true }
kigi-memory = { workspace = true }
kigi-hooks = { path = "../kigi-hooks" }
kigi-hooks-plugins-types = { path = "../kigi-hooks-plugins-types" }
kigi-file-utils = { path = "../kigi-file-utils" }
kigi-auth = { workspace = true, features = ["middleware"] }
kigi-log = { workspace = true }
kigi-http = { workspace = true }
kigi-models = { workspace = true }
flate2 = { workspace = true }
fs2 = { workspace = true }
zstd = { workspace = true }
tar = { workspace = true }
url = { workspace = true }
walkdir = { workspace = true }
tdigests = "1.0"
semver = { workspace = true }
process-wrap = { version = "9.0.0", features = ["tokio1", "job-object", "creation-flags"] }
portable-pty = "0.9"
parking_lot.workspace = true
dashmap.workspace = true

# Used by acp_session.rs and mcp_servers.rs for the unified
# kigi_tool_runtime::Tool dispatch model.
kigi-tool-runtime = { workspace = true }
kigi-tool-protocol = { workspace = true }
kigi-tool-types = { workspace = true }

[target.'cfg(unix)'.dependencies]
libc = { workspace = true }
nix = { workspace = true }

[target.'cfg(target_os = "macos")'.dependencies]
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
keyring = { workspace = true, features = ["apple-native"] }

[target.'cfg(windows)'.dependencies]
siphasher = { workspace = true }
windows = { workspace = true }
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
keyring = { workspace = true, features = ["windows-native"] }

[dev-dependencies]
criterion = { workspace = true }
wiremock = { workspace = true }
filetime = { workspace = true }
tempfile = { workspace = true }
kigi-memory = { workspace = true, features = [] }
kigi-workspace = { workspace = true, features = ["test-support"] }
# Feature-unification applies the signing seam to the lib when building tests, so
# integration tests can inject a throwaway trusted key; production builds exclude
# dev-deps and compile the seam out.
kigi-config = { workspace = true, features = ["test-support"] }
# Ed25519 signing for the managed-config signature tests.
ring = { workspace = true }
tar = { workspace = true }
flate2 = { workspace = true }
rsa = { workspace = true }
semver = { workspace = true }
serial_test = { workspace = true }
# Test-only builds expose `env::EnvVarGuard` and the cpu_profile test seams to
# this crate's test targets.
kigi-shell-base = { workspace = true, features = [] }
kigi-test-support = { workspace = true, features = [] }
kigi-test-utils = { workspace = true }
# `test-util` enables `#[tokio::test(start_paused = true)]` (paused virtual
# clock with auto-advance) so interval-driven loop tests in `auth::refresh`
# can assert exact tick counts deterministically without real-time sleep.
tokio = { workspace = true, features = ["test-util"] }

[dependencies.tempfile]
workspace = true

[[bench]]
name = "session_list"
harness = false

[lints]
workspace = true
[build-dependencies]
# build.rs only downloads ripgrep — no rmcp involvement. Workspace reqwest
# (0.12) is plenty.
reqwest = { workspace = true, features = ["blocking"] }
flate2 = { workspace = true }
tar = { workspace = true }
[[bin]]
name = "chat-history-downgrade"
path = "src/bin/chat-history-downgrade.rs"