Cargo.toml

[workspace]
resolver = "2"
members = [
    # Foundation Layer
    "crates/foundation",

    # Protocol Layer
    "crates/cdr",
    "crates/cdr-derive",
    "crates/types",
    "crates/proto",
    "crates/qos",
    "crates/rtps",
    "crates/discovery",
    "crates/idl",
    "crates/idl-compose",
    "crates/idl-cpp",
    "crates/idl-d",
    "crates/idl-elixir",
    "crates/idl-csharp",
    "crates/idl-ada",
    "crates/idl-nim",
    "crates/idl-ocaml",
    "crates/idl-julia",
    "crates/idl-lua",
    "crates/idl-go",
    "crates/endpoint-e2e",
    "crates/dotnet-build-lock",
    "crates/idl-zig",
    "crates/idl-java",
    "crates/idl-python",
    "crates/idl-rust",
    "crates/idl-ts",
    "crates/idl-swift",
    "crates/zerodds-build",
    "crates/corba-rust",
    "crates/java-omgdds",
    "crates/time-service",
    "crates/ami4ccm",
    "crates/ccm",
    "crates/rtc",
    "crates/coap-bridge",
    "crates/websocket-bridge",
    "crates/mqtt-bridge",
    "crates/zenoh-bridge",
    "crates/dcps-async",
    "crates/flatdata",
    "crates/flatdata-derive",
    "crates/amqp-bridge",
    "crates/amqp-endpoint",
    "crates/amqp-0-9-1",
    "crates/ros2-rmw",
    "crates/grpc-bridge",
    "crates/opcua-gateway",
    "crates/opcua-pubsub",
    "crates/opcua-uacp",
    "crates/opcua-server",
    "crates/transport-tsn",
    "crates/web",
    "crates/sql-filter",

    # CORBA-Coexistence (Phase-3 Sprint 1).
    "crates/corba-giop",
    "crates/corba-iiop",
    "crates/corba-ior",
    "crates/corba-poa",
    "crates/corba-cosnaming",
    "crates/corba-ir",
    "crates/corba-csiv2",
    "crates/corba-codegen",
    "crates/corba-dds-bridge",

    # CCM-Container Stack (Phase-3 Sprint 2).
    "crates/corba-cos-event",
    "crates/corba-cos-notify",
    "crates/corba-cos-transactions",
    "crates/corba-cos-trading",
    "crates/corba-rt",
    "crates/corba-ccm",
    "crates/corba-ccm-ejb",
    "crates/corba-dnc",
    "crates/corba-ccm-lib",
    "crates/corba-interop",

    # DLRL — Data-Local-Reconstruction-Layer (Phase-3 Sprint 3).
    "crates/dlrl",
    "crates/dlrl-codegen",

    # Web-Profile (Phase-3 Sprint 4).
    "crates/zerodds-xml-wire",
    "crates/zerodds-soap",

    # Cross-language hub (wave 1: C-FFI over the DCPS runtime).
    "crates/zerodds-c-api",
    # Cross-language wave 4b: WASM CDR codec for browser/JS.
    "crates/ts-wasm",
    # Phase-5 E.1 — ROS-2 RMW shim over zerodds-c-api.
    "crates/rmw-zerodds-shim",
    # Phase-5 F.3 — OTLP-HTTP-JSON exporter.
    "crates/observability-otlp",

    # HTTP/2 + HPACK Stacks (Phase-3 Sprint 5).
    "crates/http2",
    "crates/hpack",

    # Conformance-Test-Suites (Phase-4 Cluster C).
    "crates/conformance",

    # Linux Real-Time-Scheduling Adapter (Phase-5 Cluster D — UNSAFE-FFI).
    "crates/rt-linux",

    # Transport Layer
    "crates/transport",
    "crates/transport-udp",
    "crates/transport-tcp",
    "crates/transport-shm",
    "crates/transport-uds",

    # Inspect endpoint (PDE God-mode debug path).
    # Off by default (R-034). Enable with
    # `cargo build --features zerodds-inspect-endpoint/inspect`.
    "crates/inspect-endpoint",

    # Core Services Layer
    "crates/dcps",
    # Durability-Service (ADR 0009): storage abstraction + adapters + daemon.
    "crates/durability-store",
    "crates/durability-store-file",
    "crates/durability-store-sqlite",
    "crates/durability-store-postgres",
    "crates/durability-store-lakehouse",
    "crates/durability-service",
    "crates/durability-service-bin",
    "crates/routing-service",
    "crates/spatial-dds",
    "crates/spatial-ros2",
    "endpoints/golden-gen",
    "endpoints/codegen",
    "endpoints/xrce-agent-demo",
    "endpoints/rust",
    "crates/rpc",
    "crates/security",
    "crates/security-pki",
    "crates/security-permissions",
    "crates/security-crypto",
    "crates/security-rtps",
    "crates/security-keyexchange",
    "crates/security-logging",
    "crates/security-runtime",
    "crates/xml",
    "crates/xrce",
    "crates/xrce-client",
    "crates/xrce-agent",
    "crates/recorder",
    "crates/recorder-decode",
    "crates/monitor",

    # Public API / Bindings
    "crates/rs",
    "crates/sys",
    "crates/safe-crates-only",
    "crates/cpp",
    "crates/cs",
    "crates/py",

    # Tooling crates (meta-tools, not runtime)
    "crates/lint",

    # Binary Tools
    "tools/idlc",
    "tools/admin",
    "tools/secure-permissions",
    "tools/cli-common",
    "tools/record",
    "tools/bench",
    "tools/monitor",
    "tools/spy",
    "tools/snitch",
    "tools/pcap",
    "tools/mq",
    "tools/xmlc",
    "tools/dashboard",
    "tools/perf",
    "tools/traceability",
    "tools/isolation-smoke",
    "tools/bench-suite",
    "tools/qos-matrix",
    "tools/amqp-dds-endpoint",
    # External iceoryx2 oracle — standalone consumer (iceoryx2-only, zero
    # ZeroDDS deps) that reads a ZeroDDS-published sample over iceoryx2 SHM.
    "tools/iceoryx2-oracle-consumer",
    # ZeroDDS ↔ Cyclone same-host zero-copy bridge over the iceoryx C++ (POSH)
    # transport (libiceoryx_binding_c FFI). FFI gated behind feature `posh`.
    "crates/iceoryx-cyclone",
    # Phase-5 F.2 — chaos-engineering CLI.
    "tools/chaos",
    # Phase-5 F.2 Phase-B — LD_PRELOAD shim for clock skew.
    "crates/chaos-clock-skew",
    # Phase-5 F.1 — .zddsrec replay tool.
    "tools/replay",
    # Phase-5 F.5 — cross-vendor interop-matrix renderer.
    "tools/interop-matrix",
    # Phase-5 E.3 — workspace-DAG sort for cargo publish.
    "tools/cargo-dag",
    # Phase-5 F.1 Phase-C — live recorder bridge.
    "tools/recorder-bridge",
    # RC1 Cluster-B §7.x — shared security layer for the six
    # bridge daemons (ws/mqtt/coap/amqp/grpc/corba): TLS + auth modes
    # + topic ACL.
    "crates/bridge-security",
    # OMG dds-rtps interop-suite `shape_main` reference client (BUILD +
    # LOCAL-VALIDATE phase — github.com/omg-dds/dds-rtps not yet touched).
    "tools/omg-shape-main",
]
# The Tauri shell is a sub-project with its own toolchain (tauri-cli +
# platform deps). It is not built via the cargo workspace.
exclude = [
    "tools/dashboard-tauri/src-tauri",
]

[workspace.package]
version = "1.0.0-rc.7"
edition = "2024"
rust-version = "1.88"
license = "Apache-2.0"
repository = "https://github.com/zero-objects/zero-dds"
homepage = "https://zerodds.org"
authors = ["ZeroDDS Contributors"]

# ---------------------------------------------------------------------------
# cargo-dist configuration (Phase-10 §6 zerodds-deployment-1.0).
# Builds platform artifacts and installers on tag-push via GitHub Actions.
# Single source of truth for targets, installer set and bin aliases. The
# concrete .deb/.rpm/Homebrew/MSI/Scoop/Choco manifests live under
# `packaging/<platform>/...` and are evaluated by the `publish-jobs`.
# Spec: docs/specs/zerodds-deployment-1.0.md §6 (cargo-dist) and §1 (bin set).
# ---------------------------------------------------------------------------
[workspace.metadata.dist]
cargo-dist-version = "0.22.1"
ci = ["github"]
# `msi` is excluded here because cargo-dist 0.22 expects a
# `[package.metadata.wix.upgrade-guid]` + `path-guid` per binary, which
# we don't want to maintain across 80+ crates. MSI is built instead in
# the `package-msi` job (release.yml) via our own WiX schema
# (`packaging/windows/msi/zerodds.wxs`).
installers = ["shell", "powershell", "homebrew"]
targets = [
    "x86_64-unknown-linux-gnu",
    "aarch64-unknown-linux-gnu",
    "x86_64-unknown-linux-musl",
    # aarch64-unknown-linux-musl dropped: cross-musl needs a real
    # aarch64-musl gcc; the glibc-cross-gcc hack breaks on C deps that
    # pull glibc FORTIFY headers (libsqlite3-sys: __memcpy_chk/fcntl64).
    # ARM64 Linux is shipped via aarch64-unknown-linux-gnu.
    "x86_64-apple-darwin",
    "aarch64-apple-darwin",
    "x86_64-pc-windows-msvc",
    "aarch64-pc-windows-msvc",
]
pr-run-mode = "plan"
# Build each shippable app with `-p` instead of `cargo build --workspace`.
# Required because `durability-svc` (dist=false) links the system libduckdb,
# which has no portable form across release targets — a --workspace build
# pulls it in and fails every target with `cannot find -lduckdb`. precise-builds
# makes cargo-dist build only the dist=true apps, skipping it.
precise-builds = true
allow-dirty = ["ci"]
github-release-body = "auto"
homebrew-tap = "zero-objects/homebrew-zerodds"
# cargo-dist 0.22 only knows 'homebrew' and 'npm' as built-in
# publish-jobs. Scoop + AUR + .deb + .rpm run as independent
# jobs in .github/workflows/release.yml and are not linked here.
publish-jobs = [
    "homebrew",
]
checksum = "sha512"
# cargo-dist 0.22 signing: 'cosign' needs OIDC + Sigstore;
# 'minisign' is done by us externally via packaging/github-actions/
# sign-artifacts.sh, so it is not configured here.
sign-artifacts = []

# Bin aliases for shorter invocation paths. Cross-ref:
# zerodds-deployment-1.0.md §1.1 (daemons) + §1.3 (CLIs).
[workspace.metadata.dist.bin-aliases]
zerodds-ws-bridged    = ["zddsws"]
zerodds-mqtt-bridged  = ["zddsmqtt"]
zerodds-coap-bridged  = ["zddscoap"]
zerodds-amqp-bridged  = ["zddsamqp"]
zerodds-grpc-bridged  = ["zddsgrpc"]
zerodds-corba-bridged = ["zddscorba"]
zerodds-ros2-shim     = ["zddsros2"]
zerodds-router        = ["zddsrouter"]
zerodds-admin         = ["zdds"]
zerodds-idlc          = ["zddsidl"]
zerodds-spy           = ["zddsspy"]
zerodds-record        = ["zddsrec"]
zerodds-replay        = ["zddsplay"]
zerodds-bench         = ["zddsbench"]
zerodds-snitch        = ["zddssnitch"]
zerodds-monitor       = ["zddsmon"]
zerodds-mq            = ["zddsmq"]
zerodds-pcap          = ["zddspcap"]
zerodds-perf          = ["zddsperf"]

# Per-target feature selection. Linux-musl builds the static
# AppImage builds (§2.2.4); Windows-MSVC includes the ETW provider.
[workspace.metadata.dist.dependencies.apt]
libssl-dev = "*"
pkg-config = "*"

[workspace.metadata.dist.dependencies.homebrew]
openssl = "*"

[workspace.metadata.dist.dependencies.chocolatey]
visualstudio2022buildtools = "*"

# Workspace-wide lints per 02_architecture.md §2 (no-panic contract)
# and 04_safety_by_architecture.md §2.1 (language restrictions).
# Comfort crates (recorder, monitor, tools/*) may relax individual rules
# via `#![allow(...)]`; safe crates may not.
[workspace.dependencies]
# SHA-256 for XTypes TypeObject hashing (§7.3.1.2). Pure-Rust,
# no_std+alloc, 0 transitive deps. Widely used (rust-crypto family).
sha2 = { version = "0.10", default-features = false }
# HMAC-SHA-256 for OSCORE HKDF key derivation (RFC 8613 §3.2.1 / RFC 5869) and
# AMQP SASL SCRAM-SHA-256 (RFC 7677). Pure-Rust no_std, RustCrypto (pairs sha2).
hmac = { version = "0.12", default-features = false }
# Base64 for the SASL SCRAM wire messages (salt/proof/signature; RFC 7677).
# no_std + alloc.
base64 = { version = "0.22", default-features = false, features = ["alloc"] }
# AES-CCM AEAD for OSCORE (RFC 8613 §5; AES-CCM-16-64-128, COSE alg 10).
# RustCrypto, no_std, pairs with the `aes` block cipher already in the tree.
ccm = { version = "0.5", default-features = false, features = ["alloc"] }
aes = { version = "0.8", default-features = false }
# sqlite (WAL) cold adapter for the Durability-Service (ADR 0009). `bundled`
# compiles sqlite3 from source — no system libsqlite dependency on any target.
rusqlite = { version = "0.32", features = ["bundled"] }
# PostgreSQL cold adapter (ADR 0009, O11): the sync rust-postgres client — a
# blocking API over its own internal runtime, so it fits the synchronous
# `DurabilityStore` trait with no tokio in our code. Optional TimescaleDB
# hypertable partitioning behind the adapter's own `timescaledb` feature.
postgres = { version = "0.19" }
# DuckDB lakehouse cold adapter (ADR 0009): in-process SQL (House) + Parquet
# export (Lake). Links the *system* libduckdb (v1.5.3 — must match the duckdb
# crate's expected ABI; installed in ci/Dockerfile.rust and on dev hosts) via
# DUCKDB_LIB_DIR/DUCKDB_INCLUDE_DIR. The `bundled` feature (compiling the full
# DuckDB C++ amalgamation from source) was dropped: it OOM-killed the 16 GB CI
# runner and added ~1h to every build.
duckdb = { version = "1.1" }
# Ctrl-C/SIGTERM handler for the durability-service daemon binary (graceful
# shutdown). `termination` also catches SIGTERM/SIGHUP (systemd/docker stop).
ctrlc = { version = "3", features = ["termination"] }
# Criterion for micro-benchmarks. Dev-dependency only.
criterion = { version = "0.5", default-features = false, features = ["cargo_bench_support"] }
# proptest for property tests on state machines (TS-1 foundation
# hardening). Dev-dependency only. Pure-Rust + minimal deps.
proptest = { version = "1.4", default-features = false, features = ["std"] }
# insta for snapshot tests of codegen output (TS-1).
insta = { version = "1.40", default-features = false }
# flate2 for the CORBA 3.3 §18 compression codec (Zlib/Gzip/Deflate).
# Pure-Rust backend, no C build, std-only. Used in
# `crates/corba-ccm/src/orb_extensions.rs::CompressionAlgorithm` as a
# real wire codec; replaces the former stub.
flate2 = { version = "1", default-features = false, features = ["rust_backend"] }
# === Dep-hygiene sprint 1 (2026-05-18) ===
# Centralized common deps with an identical spec across multiple crates.
# Prevents version drift on future updates, simplifies
# security audits (one place, all users follow).
#
# rustls 0.23 — TLS stack for all bridge crates (7 users: bridge-
# security, amqp-endpoint, corba-dds-bridge, grpc-bridge, mqtt-bridge,
# websocket-bridge, amqp-dds-endpoint). default-features off + ring
# backend pinned; tls12 for legacy interop.
rustls = { version = "0.23", default-features = false, features = ["std", "ring", "logging", "tls12"] }
# ring 0.17 — standard crypto primitives for all security crates
# (7 users: bridge-security, security-crypto, security-keyexchange,
# security-permissions, security-pki, security-runtime, tools/perf).
ring = "0.17"
# libc — POSIX API bindings. no-default-features for no_std crates
# (rt-linux, transport-shm), the caller may enable the "std" feature.
# 8 users: amqp-endpoint, corba-dds-bridge, dcps, grpc-bridge, rt-linux,
# transport-shm, transport-uds, tools/cli-common.
libc = { version = "0.2", default-features = false }
# signal-hook — graceful-shutdown handler for bridge tools (6 users:
# amqp-endpoint, coap-bridge, corba-dds-bridge, grpc-bridge, mqtt-
# bridge, websocket-bridge). default-features off + iterator API.
signal-hook = { version = "0.3", default-features = false, features = ["iterator"] }
# rustls-pemfile — PEM loader for bridge cert paths (6 users, like rustls).
rustls-pemfile = "2"
# rustls-pki-types — cert/key wire types (3 users: bridge-security,
# security-permissions, security-pki).
rustls-pki-types = { version = "1.11", default-features = false, features = ["std", "alloc"] }
# rustls-webpki — X.509 chain validation (2 users: security-permissions,
# security-pki). ring backend compatible with rustls above.
# Provider (ring | aws-lc-rs) is selected by the two users' backend features
# (security-pki / security-permissions `ring-backend` vs `aws-lc`), not forced here.
rustls-webpki = { version = "0.103", default-features = false, features = ["std"] }
# roxmltree — XML parser for DDS-XML config/permissions/OPC-UA NodeSet
# (5 users: amqp-endpoint, opcua-gateway, security-permissions, xml,
# transport-tsn). Pure-Rust, no xml-rs (heavy).
roxmltree = "0.20"
# socket2 — extended socket options (SO_REUSEPORT, IP_MULTICAST_*).
# 2 users: transport-udp, transport-uds.
socket2 = { version = "0.5", features = ["all"] }

[workspace.lints.rust]
unsafe_op_in_unsafe_fn = "deny"
missing_docs = "warn"
rust_2024_compatibility = { level = "warn", priority = -1 }

[workspace.lints.clippy]
unwrap_used = "deny"
expect_used = "deny"
panic = "deny"
todo = "deny"
unimplemented = "deny"
unreachable = "deny"
dbg_macro = "deny"
print_stdout = "warn"
print_stderr = "warn"
# clippy 1.88 newly added doc_overindented_list_items to the default set;
# we use tabular-aligned doc comments for annotation mappings
# (idl-csharp/idl-java) and listener docs, where auto-reformatting
# destroys the visual readability. A local allow is cleaner than
# fragmenting it per-file.
doc_overindented_list_items = "allow"

[profile.release]
lto = "thin"
codegen-units = 1
strip = "debuginfo"
debug = 1          # line tables for flamegraphs

# `dist` profile for the cargo-dist release pipeline (.github/workflows/release.yml).
# Inherits from release plus `lto = "fat"` for smaller static binaries.
# Spec: zerodds-deployment-1.0.md §6.
[profile.dist]
inherits = "release"
lto = "fat"
codegen-units = 1
strip = "symbols"

[profile.release-safe]
inherits = "release"
lto = "fat"
codegen-units = 1
overflow-checks = true
debug-assertions = false

[profile.bench]
inherits = "release"
debug = 2