Files
Kigi-CLI/crates/codegen/kigi-shell/Cargo.toml
T
ZacharyZhang-NY 5e4e24db99 M2 audit: excise managed connectors and xAI media-gen tools
Managed connectors (grok.com MCP admin) removed root-and-branch:
- The managed-MCP fetch/injection pipeline is gone, including the whole
  kigi-shell-session-support crate (managed-config fetch client, gateway
  tool catalog + dispatch, header injection, refresh task), reactive
  managed re-auth, mcp_doctor's grok.com-source discovery, and the
  [managed_mcps] config surface.
- TUI: the 'Managed by grok.com' section, connectors URL/deep-link,
  Action::OpenManagedConnectors, and session_team_id are gone. Local MCP
  management (list/toggle/add/remove/auth/tools) is fully intact.
- Kept as LOCAL policy: managed-settings.json MCP allow/deny enforcement,
  the multi-source local MCP merge, folder-trust gating. PluginOrigin
  Project/User labels kept (they tag locally discovered plugin dirs).

imagine/media-gen tools (xAI image/video generation) removed:
- image_gen, image_edit, video_gen, image_to_video, reference_to_video
  implementations, registrations, ToolKind/ToolInput/Output variants
  (serde-safe), config plumbing end to end, ZDR video machinery,
  /imagine + /imagine-video commands and guidance text, the bundled
  imagine skill (added to legacy cleanup so user installs delete it),
  and the media-gen render path.
- Kept: image INPUT (paste/attach, [Image #N] meta, pdf/image fetch,
  clipboard wrap), generic media-ref rendering, and the generic tool
  401-retry machinery (tests renamed, assertions unweakened).
- deploy_app stays: it is a permanently-disabled local stub deploying
  nowhere.

121 files changed, 8 deleted. Gates: workspace check/clippy 0/0, fmt,
deny ok; suites green (tools 2554, shell 4862, tui 6608, workspace
1042). Remaining grok.com strings live only in the auth-method ids and
changelog archives (§9/M3 sweep).
2026-07-17 23:45:05 -04:00

227 lines
7.9 KiB
TOML

[package]
license = "Apache-2.0"
name = "kigi-shell"
version.workspace = true
edition.workspace = true
[features]
default = []
unstable = []
default-bazel = [
]
[dependencies]
dunce = { workspace = true }
tonic-prost = { workspace = true, optional = true }
agent-client-protocol = { workspace = true }
anyhow = { workspace = true }
kigi-prompt-queue = { workspace = true }
kigi-version = { workspace = true }
async-openai = { workspace = true }
async-trait = { workspace = true }
blake3 = { workspace = true }
bm25 = "2.3"
bytes = { workspace = true }
chrono = { workspace = true }
indexmap = { workspace = true, features = ["serde"] }
ignore = { workspace = true }
jsonschema = { workspace = true }
futures = { workspace = true }
glob = { workspace = true }
globset = { workspace = true }
kanal = "0.1"
regex = { workspace = true }
# rmcp 2.1 + reqwest 0.13 are quarantined inside `kigi-mcp`. The remaining
# MCP code in this crate (extensions/mcp.rs, mcp_doctor.rs) reaches rmcp model
# types via `kigi_mcp::rmcp::model::*`. reqwest 0.13 is a private impl
# detail of kigi-mcp::servers; shell never sees it. Every HTTP call site
# in this crate uses workspace reqwest 0.12.
kigi-mcp = { workspace = true }
reqwest = { workspace = true, features = ["stream", "blocking"] }
reqwest-middleware = { workspace = true }
# rusqlite 0.37 + bundled = self-contained SQLite (>= 3.50.2) with FTS5.
# Bumped from 0.32 to resolve CVE-2025-29087, CVE-2025-3277, CVE-2025-6965.
# sqlite-vec is C ABI, not Rust-version dependent — any rusqlite with `bundled` works.
rusqlite = { version = "0.37", features = ["bundled"] }
serde = { workspace = true }
serde_ignored = "0.1"
serde_json = { workspace = true, features = ["preserve_order"] }
similar = { workspace = true }
thiserror = { workspace = true }
clap = { workspace = true }
dirs = "6"
tokio-stream = { workspace = true }
tower-http = { workspace = true, features = ["cors"] }
toml = { workspace = true, features = ["preserve_order"] }
toml_edit = { workspace = true }
tokio = { workspace = true, features = [
"io-std",
"process",
"rt",
"macros",
"rt-multi-thread",
"net",
"sync",
] }
tracing = { workspace = true }
tracing-subscriber = { workspace = true, features = [
"env-filter",
"fmt",
"json",
"time",
] }
obfstr = { workspace = true }
tokio-util = { workspace = true, features = ["compat"] }
tokio-retry = { workspace = true }
uuid = { workspace = true, features = ["v4", "v5", "v7"] }
kigi-acp-lib = { workspace = true }
axum = { workspace = true, features = ["ws", "multipart"] }
backon = { workspace = true }
webbrowser = { workspace = true }
tokio-rustls = { version = "0.26", default-features = false, features = [
"ring",
"logging",
"tls12",
] }
rustls = { version = "0.23", default-features = false, features = [
"ring",
"logging",
"std",
"tls12",
] }
rustls-native-certs = "0.8"
futures-util = { workspace = true }
urlencoding = { workspace = true }
gethostname = { workspace = true }
git2 = { workspace = true }
notify = { workspace = true }
notify-debouncer-mini = { workspace = true }
nucleo = { workspace = true }
arc-swap = { workspace = true }
infer = "0.15"
image = { workspace = true, features = ["png", "jpeg", "gif", "webp"] }
moka = { workspace = true, features = ["future"] }
base64 = { workspace = true }
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
sha2 = { workspace = true }
rand = { workspace = true }
shlex = { workspace = true }
strum = { workspace = true }
kigi-fast-worktree = { path = "../kigi-fast-worktree", features = ["metadata"] }
tonic = { workspace = true, optional = true }
prost = { workspace = true, optional = true }
kigi-paths = { path = "../kigi-paths" }
kigi-shell-base = { workspace = true }
kigi-env = { workspace = true }
kigi-shared = { workspace = true }
kigi-tracing-macros = { path = "../kigi-tracing-macros" }
kigi-fsnotify = { path = "../kigi-fsnotify" }
kigi-codebase-graph = { path = "../kigi-codebase-graph" }
kigi-hunk-tracker = { path = "../kigi-hunk-tracker" }
kigi-agent-lifecycle = { workspace = true }
kigi-interjection-core = { workspace = true }
kigi-sandbox = { path = "../kigi-sandbox", default-features = false }
kigi-chat-state = { path = "../kigi-chat-state" }
kigi-compaction = { path = "../../common/kigi-compaction" }
kigi-sampler = { path = "../kigi-sampler" }
kigi-sqlite-journal = { workspace = true }
kigi-token-estimation = { workspace = true }
kigi-sampling-types = { path = "../kigi-sampling-types" }
kigi-tools = { path = "../kigi-tools" }
kigi-tty-utils = { workspace = true }
kigi-system-power = { workspace = true }
kigi-workspace = { workspace = true }
kigi-subagent-resolution = { path = "../kigi-subagent-resolution" }
kigi-agent = { path = "../kigi-agent" }
kigi-config = { workspace = true }
kigi-config-types = { workspace = true }
kigi-memory = { workspace = true }
kigi-hooks = { path = "../kigi-hooks" }
kigi-hooks-plugins-types = { path = "../kigi-hooks-plugins-types" }
kigi-file-utils = { path = "../kigi-file-utils" }
kigi-auth = { workspace = true, features = ["middleware"] }
kigi-log = { workspace = true }
kigi-http = { workspace = true }
kigi-models = { workspace = true }
flate2 = { workspace = true }
fs2 = { workspace = true }
zstd = { workspace = true }
tar = { workspace = true }
url = { workspace = true }
walkdir = { workspace = true }
tdigests = "1.0"
semver = { workspace = true }
process-wrap = { version = "9.0.0", features = ["tokio1", "job-object", "creation-flags"] }
portable-pty = "0.9"
parking_lot.workspace = true
dashmap.workspace = true
# Used by acp_session.rs and mcp_servers.rs for the unified
# kigi_tool_runtime::Tool dispatch model.
kigi-tool-runtime = { workspace = true }
kigi-tool-protocol = { workspace = true }
kigi-tool-types = { workspace = true }
[target.'cfg(unix)'.dependencies]
libc = { workspace = true }
nix = { workspace = true }
[target.'cfg(target_os = "macos")'.dependencies]
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
keyring = { workspace = true, features = ["apple-native"] }
[target.'cfg(windows)'.dependencies]
siphasher = { workspace = true }
windows = { workspace = true }
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
keyring = { workspace = true, features = ["windows-native"] }
[dev-dependencies]
criterion = { workspace = true }
wiremock = { workspace = true }
filetime = { workspace = true }
tempfile = { workspace = true }
kigi-memory = { workspace = true, features = [] }
kigi-workspace = { workspace = true, features = ["test-support"] }
# Feature-unification applies the signing seam to the lib when building tests, so
# integration tests can inject a throwaway trusted key; production builds exclude
# dev-deps and compile the seam out.
kigi-config = { workspace = true, features = ["test-support"] }
# Ed25519 signing for the managed-config signature tests.
ring = { workspace = true }
tar = { workspace = true }
flate2 = { workspace = true }
rsa = { workspace = true }
semver = { workspace = true }
serial_test = { workspace = true }
# Test-only builds expose `env::EnvVarGuard` and the cpu_profile test seams to
# this crate's test targets.
kigi-shell-base = { workspace = true, features = [] }
kigi-test-support = { workspace = true, features = [] }
kigi-test-utils = { workspace = true }
# `test-util` enables `#[tokio::test(start_paused = true)]` (paused virtual
# clock with auto-advance) so interval-driven loop tests in `auth::refresh`
# can assert exact tick counts deterministically without real-time sleep.
tokio = { workspace = true, features = ["test-util"] }
[dependencies.tempfile]
workspace = true
[[bench]]
name = "session_list"
harness = false
[lints]
workspace = true
[build-dependencies]
# build.rs only downloads ripgrep — no rmcp involvement. Workspace reqwest
# (0.12) is plenty.
reqwest = { workspace = true, features = ["blocking"] }
flate2 = { workspace = true }
tar = { workspace = true }
[[bin]]
name = "chat-history-downgrade"
path = "src/bin/chat-history-downgrade.rs"