ZacharyZhang-NY
fa75eb139a
Removed root-and-branch for the zero-egress guarantee (the hub was xAI's remote-workspace/cloud-sandbox service): - Crates deleted: kigi-computer-hub-core, kigi-computer-hub-sdk, kigi-computer-hub-mcp-adapter, kigi-workspace-client (hub-proxied workspace RPC client), and kigi-tracing (its sole network path was the OTLP gRPC exporter; zero consumers remained). kigi-tracing-macros (purely local) stays. - kigi-workspace: every hub surface deleted — hub server/channel/auth, HITL-over-hub permissions, donation/metrics pumps, file upload RPCs, hub tool-snapshot merge (resolve pipeline is MCP-only now), WorkspaceOps::Proxy. Local worktrees, sessions, leader IPC, MCP, and the ACP permission prompt path are untouched; LocalRegistry re-homed into kigi-tool-runtime on the existing ToolDyn types so in-process tool dispatch is unchanged. - kigi-shell: leader workspace-exposure control surface (incl. the wss://computer-hub... URL), [hub] config, ObservabilityBridge, hub WebSocket proxy, dead OTLP config knobs. ClientMode::Headless (never constructed) removed. - kigi-tui/bin: hidden `kigi workspace` command removed (`kigi worktree` stays). - Renames: --xai-api-base-url → --api-base-url / KIGI_API_BASE_URL / [endpoints] api_base_url (serde alias keeps old configs working; the flag feeds BYOK/custom-endpoint routing, not main inference); grok_version → kigi_version in inspect/models-cache/trace metadata (old caches self-heal via version-mismatch refetch). - Dependency tree: dropped fastrace*, opentelemetry-otlp/http/proto, tokio-tungstenite from the workspace; fixed the 4 real useless_format violations the fastrace lint allowance was masking and removed the allowance. - marketplaceAllowlist kept: it gates the LOCAL plugin-marketplace feature, not an xAI service. Known §9 leftover (deliberate, for the M3 sweep): the BYOK default base URL string. Gates: workspace check/clippy 0/0, fmt, deny ok; suites green (workspace 1042, shell 4918, tui 6634, tools 2608, tool-runtime 47, mcp 154).
228 lines
7.9 KiB
TOML
228 lines
7.9 KiB
TOML
[package]
|
|
license = "Apache-2.0"
|
|
name = "kigi-shell"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
|
|
[features]
|
|
default = []
|
|
unstable = []
|
|
default-bazel = [
|
|
]
|
|
|
|
[dependencies]
|
|
dunce = { workspace = true }
|
|
tonic-prost = { workspace = true, optional = true }
|
|
agent-client-protocol = { workspace = true }
|
|
anyhow = { workspace = true }
|
|
kigi-prompt-queue = { workspace = true }
|
|
kigi-version = { workspace = true }
|
|
|
|
async-openai = { workspace = true }
|
|
async-trait = { workspace = true }
|
|
blake3 = { workspace = true }
|
|
bm25 = "2.3"
|
|
bytes = { workspace = true }
|
|
chrono = { workspace = true }
|
|
indexmap = { workspace = true, features = ["serde"] }
|
|
ignore = { workspace = true }
|
|
jsonschema = { workspace = true }
|
|
futures = { workspace = true }
|
|
glob = { workspace = true }
|
|
globset = { workspace = true }
|
|
kanal = "0.1"
|
|
regex = { workspace = true }
|
|
# rmcp 2.1 + reqwest 0.13 are quarantined inside `kigi-mcp`. The remaining
|
|
# MCP code in this crate (extensions/mcp.rs, mcp_doctor.rs) reaches rmcp model
|
|
# types via `kigi_mcp::rmcp::model::*`. reqwest 0.13 is a private impl
|
|
# detail of kigi-mcp::servers; shell never sees it. Every HTTP call site
|
|
# in this crate uses workspace reqwest 0.12.
|
|
kigi-mcp = { workspace = true }
|
|
reqwest = { workspace = true, features = ["stream", "blocking"] }
|
|
reqwest-middleware = { workspace = true }
|
|
# rusqlite 0.37 + bundled = self-contained SQLite (>= 3.50.2) with FTS5.
|
|
# Bumped from 0.32 to resolve CVE-2025-29087, CVE-2025-3277, CVE-2025-6965.
|
|
# sqlite-vec is C ABI, not Rust-version dependent — any rusqlite with `bundled` works.
|
|
rusqlite = { version = "0.37", features = ["bundled"] }
|
|
serde = { workspace = true }
|
|
serde_ignored = "0.1"
|
|
serde_json = { workspace = true, features = ["preserve_order"] }
|
|
similar = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
clap = { workspace = true }
|
|
dirs = "6"
|
|
tokio-stream = { workspace = true }
|
|
tower-http = { workspace = true, features = ["cors"] }
|
|
toml = { workspace = true, features = ["preserve_order"] }
|
|
toml_edit = { workspace = true }
|
|
tokio = { workspace = true, features = [
|
|
"io-std",
|
|
"process",
|
|
"rt",
|
|
"macros",
|
|
"rt-multi-thread",
|
|
"net",
|
|
"sync",
|
|
] }
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true, features = [
|
|
"env-filter",
|
|
"fmt",
|
|
"json",
|
|
"time",
|
|
] }
|
|
obfstr = { workspace = true }
|
|
tokio-util = { workspace = true, features = ["compat"] }
|
|
tokio-retry = { workspace = true }
|
|
uuid = { workspace = true, features = ["v4", "v5", "v7"] }
|
|
kigi-acp-lib = { workspace = true }
|
|
axum = { workspace = true, features = ["ws", "multipart"] }
|
|
backon = { workspace = true }
|
|
webbrowser = { workspace = true }
|
|
tokio-rustls = { version = "0.26", default-features = false, features = [
|
|
"ring",
|
|
"logging",
|
|
"tls12",
|
|
] }
|
|
rustls = { version = "0.23", default-features = false, features = [
|
|
"ring",
|
|
"logging",
|
|
"std",
|
|
"tls12",
|
|
] }
|
|
rustls-native-certs = "0.8"
|
|
futures-util = { workspace = true }
|
|
urlencoding = { workspace = true }
|
|
gethostname = { workspace = true }
|
|
git2 = { workspace = true }
|
|
notify = { workspace = true }
|
|
notify-debouncer-mini = { workspace = true }
|
|
nucleo = { workspace = true }
|
|
arc-swap = { workspace = true }
|
|
infer = "0.15"
|
|
image = { workspace = true, features = ["png", "jpeg", "gif", "webp"] }
|
|
moka = { workspace = true, features = ["future"] }
|
|
base64 = { workspace = true }
|
|
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
|
|
sha2 = { workspace = true }
|
|
rand = { workspace = true }
|
|
shlex = { workspace = true }
|
|
strum = { workspace = true }
|
|
kigi-fast-worktree = { path = "../kigi-fast-worktree", features = ["metadata"] }
|
|
|
|
tonic = { workspace = true, optional = true }
|
|
prost = { workspace = true, optional = true }
|
|
kigi-paths = { path = "../kigi-paths" }
|
|
kigi-shell-base = { workspace = true }
|
|
kigi-env = { workspace = true }
|
|
kigi-shell-session-support = { workspace = true }
|
|
kigi-shared = { workspace = true }
|
|
kigi-tracing-macros = { path = "../kigi-tracing-macros" }
|
|
kigi-fsnotify = { path = "../kigi-fsnotify" }
|
|
kigi-codebase-graph = { path = "../kigi-codebase-graph" }
|
|
kigi-hunk-tracker = { path = "../kigi-hunk-tracker" }
|
|
kigi-agent-lifecycle = { workspace = true }
|
|
kigi-interjection-core = { workspace = true }
|
|
kigi-sandbox = { path = "../kigi-sandbox", default-features = false }
|
|
kigi-chat-state = { path = "../kigi-chat-state" }
|
|
kigi-compaction = { path = "../../common/kigi-compaction" }
|
|
kigi-sampler = { path = "../kigi-sampler" }
|
|
kigi-sqlite-journal = { workspace = true }
|
|
kigi-token-estimation = { workspace = true }
|
|
kigi-sampling-types = { path = "../kigi-sampling-types" }
|
|
kigi-tools = { path = "../kigi-tools" }
|
|
kigi-tty-utils = { workspace = true }
|
|
kigi-system-power = { workspace = true }
|
|
kigi-workspace = { workspace = true }
|
|
kigi-subagent-resolution = { path = "../kigi-subagent-resolution" }
|
|
kigi-agent = { path = "../kigi-agent" }
|
|
kigi-config = { workspace = true }
|
|
kigi-config-types = { workspace = true }
|
|
kigi-memory = { workspace = true }
|
|
kigi-hooks = { path = "../kigi-hooks" }
|
|
kigi-hooks-plugins-types = { path = "../kigi-hooks-plugins-types" }
|
|
kigi-file-utils = { path = "../kigi-file-utils" }
|
|
kigi-auth = { workspace = true, features = ["middleware"] }
|
|
kigi-log = { workspace = true }
|
|
kigi-http = { workspace = true }
|
|
kigi-models = { workspace = true }
|
|
flate2 = { workspace = true }
|
|
fs2 = { workspace = true }
|
|
zstd = { workspace = true }
|
|
tar = { workspace = true }
|
|
url = { workspace = true }
|
|
walkdir = { workspace = true }
|
|
tdigests = "1.0"
|
|
semver = { workspace = true }
|
|
process-wrap = { version = "9.0.0", features = ["tokio1", "job-object", "creation-flags"] }
|
|
portable-pty = "0.9"
|
|
parking_lot.workspace = true
|
|
dashmap.workspace = true
|
|
|
|
# Used by acp_session.rs and mcp_servers.rs for the unified
|
|
# kigi_tool_runtime::Tool dispatch model.
|
|
kigi-tool-runtime = { workspace = true }
|
|
kigi-tool-protocol = { workspace = true }
|
|
kigi-tool-types = { workspace = true }
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = { workspace = true }
|
|
nix = { workspace = true }
|
|
|
|
[target.'cfg(target_os = "macos")'.dependencies]
|
|
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
|
|
keyring = { workspace = true, features = ["apple-native"] }
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
siphasher = { workspace = true }
|
|
windows = { workspace = true }
|
|
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
|
|
keyring = { workspace = true, features = ["windows-native"] }
|
|
|
|
[dev-dependencies]
|
|
criterion = { workspace = true }
|
|
wiremock = { workspace = true }
|
|
filetime = { workspace = true }
|
|
tempfile = { workspace = true }
|
|
kigi-memory = { workspace = true, features = [] }
|
|
kigi-workspace = { workspace = true, features = ["test-support"] }
|
|
# Feature-unification applies the signing seam to the lib when building tests, so
|
|
# integration tests can inject a throwaway trusted key; production builds exclude
|
|
# dev-deps and compile the seam out.
|
|
kigi-config = { workspace = true, features = ["test-support"] }
|
|
# Ed25519 signing for the managed-config signature tests.
|
|
ring = { workspace = true }
|
|
tar = { workspace = true }
|
|
flate2 = { workspace = true }
|
|
rsa = { workspace = true }
|
|
semver = { workspace = true }
|
|
serial_test = { workspace = true }
|
|
# Test-only builds expose `env::EnvVarGuard` and the cpu_profile test seams to
|
|
# this crate's test targets.
|
|
kigi-shell-base = { workspace = true, features = [] }
|
|
kigi-test-support = { workspace = true, features = [] }
|
|
kigi-test-utils = { workspace = true }
|
|
# `test-util` enables `#[tokio::test(start_paused = true)]` (paused virtual
|
|
# clock with auto-advance) so interval-driven loop tests in `auth::refresh`
|
|
# can assert exact tick counts deterministically without real-time sleep.
|
|
tokio = { workspace = true, features = ["test-util"] }
|
|
|
|
[dependencies.tempfile]
|
|
workspace = true
|
|
|
|
[[bench]]
|
|
name = "session_list"
|
|
harness = false
|
|
|
|
[lints]
|
|
workspace = true
|
|
[build-dependencies]
|
|
# build.rs only downloads ripgrep — no rmcp involvement. Workspace reqwest
|
|
# (0.12) is plenty.
|
|
reqwest = { workspace = true, features = ["blocking"] }
|
|
flate2 = { workspace = true }
|
|
tar = { workspace = true }
|
|
[[bin]]
|
|
name = "chat-history-downgrade"
|
|
path = "src/bin/chat-history-downgrade.rs"
|