dirge-agent 0.19.21

[package]
# Crate (crates.io) name is `dirge-agent` — the short `dirge` was already
# taken on crates.io. The installed BINARY is still `dirge` (see [[bin]]),
# so users run: `cargo install dirge-agent` then the `dirge` command.
name = "dirge-agent"
version = "0.19.21"
edition = "2024"
# MSRV: edition 2024 needs 1.85, but the dependency tree (time, serde_with,
# darling, instability) requires 1.88 — pin there so older toolchains fail
# with a clear version error instead of a cryptic edition/build failure.
rust-version = "1.88"
authors = ["Yogthos <yogthos@gmail.com>"]
description = "Minimalistic coding agent written in Rust, optimized for memory footprint and performance"
license = "GPL-3.0-only"
homepage = "https://github.com/dirge-code/dirge"
repository = "https://github.com/dirge-code/dirge"
readme = "README.md"
keywords = ["ai", "cli", "agent", "llm", "tui"]
categories = ["command-line-utilities", "development-tools"]
# Keep the published package small (crates.io caps at 10 MiB compressed).
# Exclude vendored native libs, images, and local tooling state; the
# compile-time-embedded `prompts/` (include_dir!) is deliberately NOT
# excluded — it must ship.
exclude = [
    "vendor/",
    "spikes/",
    "img/",
    "docs/",
    ".beads/",
    ".dirge/",
    ".github/",
    # Marketing / authoring drafts + internal release-process docs —
    # not part of the crate's source.
    "blog.md",
    "publishing.md",
]

# The crate is `dirge-agent` but the command users invoke stays `dirge`.
# Also keeps the binary crate's name `dirge`, so `module_path!()` (and
# thus the `dirge=…` RUST_LOG filter + explicit `dirge::…` tracing
# targets) are unchanged by the package rename.
[[bin]]
name = "dirge"
path = "src/main.rs"

[[bin]]
name = "dirge-microvm-runner"
path = "src/bin/dirge-microvm-runner.rs"
required-features = ["sandbox-microvm"]

[package.metadata.cargo-machete]
# rig-core is a direct dep solely to pin feature flags (reqwest,
# derive, rustls) — the actual `use rig_core::…` imports come
# through rig's re-exports. cargo-machete can't detect feature-flag
# deps, so it falsely reports rig-core as unused.
ignored = ["rig-core"]

[package.metadata.cargo-shear]
ignored = ["rig-core"]
ignored-paths = ["src/tests/dap/fixtures/test_program.rs"]

[features]
# Batteries-included by default: `cargo install dirge-agent` and the
# release binaries get the whole tool (MCP, LSP, ACP, plugins, and every
# tree-sitter language). The two `experimental-ui-*` flags stay opt-in.
# To build a leaner binary, use `--no-default-features --features "…"`.
default = [
    'loop',
    'git-worktree',
    'mcp',
    'lsp',
    'acp',
    'plugin',
    'semantic-ts',
    'semantic-python',
    'semantic-bash',
    'semantic-clojure',
    'semantic-go',
    'semantic-ruby',
    'semantic-rust',
    'semantic-java',
    'semantic-c',
    'semantic-cpp',
    'semantic-elixir',
    'semantic-sql',
    'semantic-dafny',
    'slash-completion',
    'mcp-server',
]
# The default feature set minus `plugin` — everything except the Janet
# plugin runtime. Use this for a source build that doesn't need a C/LLVM
# toolchain: the `plugin` feature pulls in `janetrs`/`evil_janet`, which
# compile Janet from C and run `bindgen` (needs a C compiler + libclang).
# On a host missing or mismatching those, `evil_janet` emits opaque FFI
# structs and the build fails (dirge-4xgd, #712). Toolchain-free install:
# `cargo install dirge-agent --no-default-features --features no-plugin`.
no-plugin = [
    'loop',
    'git-worktree',
    'mcp',
    'lsp',
    'acp',
    'semantic-ts',
    'semantic-python',
    'semantic-bash',
    'semantic-clojure',
    'semantic-go',
    'semantic-ruby',
    'semantic-rust',
    'semantic-java',
    'semantic-c',
    'semantic-cpp',
    'semantic-elixir',
    'semantic-sql',
    'semantic-dafny',
    'slash-completion',
    'mcp-server',
]
# Windows ships the `no-plugin` set: the Janet bindings can't build on MSVC
# at all (`evil_janet` references `_setjmp`, absent on MSVC, and `janetrs`
# 0.8 passes an i64 to the Windows `fseek`, whose `offset` is `c_long`/i32).
# The release workflow builds the Windows target with this set.
windows-default = ['no-plugin']
loop = []
# Run dirge itself as an MCP server (`dirge mcp`) so another agent (e.g.
# Claude Code) can delegate implementation tasks to dirge and review them.
# Pulls rmcp's server side + stdio transport + the tool macros.
mcp-server = ["dep:rmcp", "rmcp?/server", "rmcp?/macros", "rmcp?/transport-io", "rmcp?/schemars"]
git-worktree = []
mcp = [
    "dep:rmcp",
    "rmcp?/client",
    "rmcp?/transport-child-process",
    "rmcp?/transport-streamable-http-client-reqwest",
]
acp = ["dep:agent-client-protocol"]
semantic = ["dep:tree-sitter", "dep:streaming-iterator"]
semantic-ts = ["semantic", "dep:tree-sitter-typescript"]
semantic-python = ["semantic", "dep:tree-sitter-python"]
semantic-bash = ["semantic", "dep:tree-sitter-bash"]
semantic-clojure = ["semantic", "dep:tree-sitter-clojure"]
semantic-go = ["semantic", "dep:tree-sitter-go"]
semantic-ruby = ["semantic", "dep:tree-sitter-ruby"]
semantic-rust = ["semantic", "dep:tree-sitter-rust"]
semantic-java = ["semantic", "dep:tree-sitter-java"]
semantic-c = ["semantic", "dep:tree-sitter-c"]
semantic-cpp = ["semantic", "dep:tree-sitter-cpp"]
semantic-elixir = ["semantic", "dep:tree-sitter-elixir"]
semantic-sql = ["semantic", "dep:tree-sitter-sequel"]
semantic-dafny = ["semantic", "dep:tree-sitter-dafny"]
plugin = ["dep:janetrs"]
lsp = ["dep:lsp-types"]
dap = ["dep:which", "dep:dap"]
sandbox-microvm = ["dep:libkrun-sys", "dep:russh", "dep:hex"]
# timing-diagnostics: compile-time gate for relay byte accounting
# counters and invariants. No runtime cost when disabled. Used in
# stress tests to identify keystroke-loss points.
timing-diagnostics = []
# Slash-command tab completion + ghost-suffix hinting. On by default
# (it had been gated off as `experimental-ui-tab-slash`, so default
# builds silently had no command autocomplete). Opt out with
# --no-default-features.
slash-completion = []
experimental-ui-terminal-tab = []
experimental-ui-computer-use = []
# Entity/relation graph storage + recursive CTE queries over
# structured tool-output facts extracted by Janet compressors.
# Opt-in: creates two new SQLite tables (entities, relations)
# and an entity_search module. PRISM #393.
experimental-graph-search = []

# The inlined llmtrim engine (src/llmtrim) carries upstream
# `#[cfg(feature = "skeleton"/"tiktoken"/"multimodal")]` blocks whose
# crates we deliberately dropped. Declare those cfg names via check-cfg
# (below) rather than as real features, so the code stays permanently
# excluded — `--all-features` can't accidentally enable it — while
# rustc's unexpected-cfg lint stays quiet under `-D warnings`.
[lints.rust]
unexpected_cfgs = { level = "warn", check-cfg = [
    'cfg(feature, values("skeleton", "tiktoken", "multimodal"))',
] }

[target.'cfg(unix)'.dependencies]
# Used by the bash tool for process-group cleanup on timeout
# (F6) — `killpg(pgid, SIGKILL)` to terminate the whole subshell
# tree rather than orphaning bash's children.
libc = "0.2"

# Native desktop notification backend for the opt-in OS notification feature.
# notify-rust is cross-platform; the backend it compiles is target-gated inside
# the crate, so the feature set differs per platform:
#   - macOS: mac-notification-sys (built in on the macOS target; no feature).
#   - Windows: WinRT toast (built in on the Windows target; no feature).
#   - Linux: needs a D-Bus backend. `z` = zbus, a pure-Rust client, so we avoid
#     a system libdbus build/link dependency.
[target.'cfg(target_os = "macos")'.dependencies]
notify-rust = { version = "4", default-features = false }

[target.'cfg(target_os = "windows")'.dependencies]
notify-rust = { version = "4", default-features = false }

[target.'cfg(target_os = "linux")'.dependencies]
notify-rust = { version = "4", default-features = false, features = ["z"] }

[dependencies]
# CVE-2026 audit (2026-05-27): rig's default features pull a
# sprawling transitive tree:
#
#   default → rustls → rig-bedrock → aws-config → aws-smithy-runtime
#     → aws-smithy-http-client → hyper-rustls 0.24.2 → rustls 0.21.12
#     → rustls-webpki 0.101.7   ← RUSTSEC-2026-0098/0099/0104
#
#   default → rustls → rig-fastembed → fastembed → hf-hub → indicatif
#     → number_prefix 0.4.0  ← RUSTSEC-2025-0119 (unmaintained)
#
#   default → rig-lancedb → lance → tantivy → lru 0.12.5
#     ← RUSTSEC-2026-0002 (unsound)
#
# Dirge only uses rig's MCP transport (`rmcp` feature) and the core
# provider/agent/completion APIs. By disabling default features we
# drop ~370 transitive crates (881→508 deps) and eliminate all 6
# cargo-audit findings.
# Pinned to an exact version, not a caret. rig ships breaking API
# changes in patch/minor releases (0.37.0 -> 0.37.1 added a required
# `Text.additional_params` field), and `cargo install dirge-agent`
# resolves without our Cargo.lock, so a caret would let a published
# dirge drift onto an incompatible rig and fail to build (GH #616).
# Bump this deliberately when adopting a new rig.
rig = { version = "=0.39.0", default-features = false, features = ["rmcp"] }
# Explicit dep to pin feature flags. Without this, rig (our only
# dep on rig-core) enables `derive` and `reqwest` via its own
# feature resolution, but we want `rustls` explicitly declared so
# future readers understand the TLS backend choice is deliberate.
# cargo-machete reports this as unused — the package.metadata
# block at the top of this file suppresses that false positive.
rig-core = { version = "=0.39.0", default-features = false, features = ["reqwest", "derive"] }
# Macros for emitting `Stream<Item = …>` from async generator-style
# code blocks. Used by `agent_loop::rig_stream` to wrap rig's
# `StreamingCompletionResponse` into our pi-style `StreamEvent`
# stream — the alternative is hand-rolled `impl Stream` with manual
# poll mechanics, which is verbose for multi-yield-per-input logic.
# Already in our Cargo.lock transitively; this declares the
# dependency explicitly so we can `use async_stream`.
async-stream = "0.3"
# Display-width-aware char counting for terminal layout. `chars().count()`
# undercounts emoji (e.g. ✅ takes 2 cells in most terminals); markdown
# tables misaligned the right border when cells contained them.
unicode-width = "0.2"
rmcp = { version = "1.7", optional = true, default-features = false, features = [
    "client",
    "transport-child-process",
    "transport-streamable-http-client-reqwest",
] }
clap = { version = "4", features = ["derive", "env"] }
crossterm = "0.29"
# ui-redesign: ratatui migration. Replaces the hand-rolled stdout
# paint paths with widget + Buffer + diff rendering. Uses
# `default-features = false` + `crossterm` backend to share the
# crossterm version already in this tree.
ratatui = { version = "0.30", default-features = false, features = ["crossterm"] }
# Convert the embedded SGR escapes that markdown.rs bakes into chat
# lines (\x1b[1m bold, \x1b[31m colored, etc.) into ratatui Spans at
# paint time. Without this, ratatui's Buffer would render the escape
# sequences as literal characters.
ansi-to-tui = "8"
serde = { version = "1", features = ["derive"] }
serde_json = { version = "1", features = ["preserve_order", "arbitrary_precision"] }
tokio = { version = "1", features = ["rt", "rt-multi-thread", "macros", "sync", "time", "process", "fs", "io-util", "signal"] }
anyhow = "1.0.103"
# Already transitive via rig's `http_client` API (rig re-exports `bytes::Bytes`
# in the request/response types). Declared directly so `provider::codex_http`
# can name `Bytes` when normalizing the Codex `/responses` body — no new crate
# enters the tree.
bytes = "1"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
chrono = { version = "0.4", features = ["serde"] }
uuid = { version = "1", features = ["v4", "serde"] }
thiserror = "2"
futures = "0.3"
# ring-based rustls TLS for reqwest. Faster cold build vs aws-lc-rs
# (~15s vs 76s native C compile). See plans/compile-time-improvements.md
reqwest = { version = "0.13", default-features = false, features = ["rustls-no-provider", "charset", "http2", "system-proxy"] }
# Explicit deps to pin rustls to ring backend instead of aws-lc-rs.
# Required because reqwest/rustls-no-provider enables the deps but
# doesn't specify a crypto backend; cargo would fall back to their
# default features (aws-lc-rs). These override that.
hyper-rustls = { version = "0.27", default-features = false, features = ["ring"] }
tokio-rustls = { version = "0.26", default-features = false, features = ["ring"] }
rustls = { version = "0.23", default-features = false, features = ["ring"] }
# UI-redesign branch: system CPU / MEM gauges for the [SYSTEM LOAD]
# sub-panel. `default-features = false` + only the modules we use
# keeps the dep small (no disks / networks / processes — just CPU
# + memory polling).
sysinfo = { version = "0.32", default-features = false, features = ["system"] }
dirs = "6"
compact_str = { version = "0.9", features = ["serde"] }
smallvec = "1"
regex = "1"
ignore = "0.4.27"
pulldown-cmark = "0.13"
include_dir = "0.7"
http = "1"
agent-client-protocol = { version = "0.12.0", optional = true }
tree-sitter = { version = "0.25", optional = true }
tree-sitter-typescript = { version = "0.23", optional = true }
tree-sitter-python = { version = "0.25", optional = true }
tree-sitter-bash = { version = "0.25", optional = true }
tree-sitter-clojure = { version = "0.1", optional = true }
tree-sitter-go = { version = "0.25", optional = true }
tree-sitter-ruby = { version = "0.23", optional = true }
tree-sitter-rust = { version = "0.24", optional = true }
tree-sitter-java = { version = "0.23", optional = true }
tree-sitter-c = { version = "0.24", optional = true }
tree-sitter-cpp = { version = "0.23", optional = true }
streaming-iterator = { version = "0.1", optional = true }
jsonschema = { version = "0.46", default-features = false, features = ["resolve-http", "resolve-file", "tls-ring"] }
janetrs = { version = "0.8", optional = true }
html2text = "0.17"
indexmap = "2"
# Windows-safe canonicalize: returns non-verbatim paths (no `\\?\` prefix)
# unless the path genuinely needs it (long/reserved). Drop-in for
# std::fs::canonicalize; identical behavior on non-Windows.
dunce = "1"
lsp-types = { version = "0.97", optional = true }
tree-sitter-elixir = { version = "0.3.5", optional = true }
tree-sitter-sequel = { version = "0.3", optional = true }
tree-sitter-dafny = { version = "0.1", optional = true }
rusqlite = { version = "0.31", features = ["bundled"] }
# DAP (Debug Adapter Protocol) — optional feature for driving
# debuggers (lldb-dap, dlv, debugpy, node) to fix crashes instead
# of sprinkling print statements. Types are hand-rolled in
# src/dap/types.rs — the dap-types crate on crates.io only has v0.0.1
# which is too incomplete.
# which: locate debug adapter binaries on the system PATH at session
# startup rather than requiring explicit paths in config.
which = { version = "8", optional = true }
# dap: Debug Adapter Protocol types from dap-rs. Replaces our hand-rolled
# types in src/dap/types.rs. The `client` feature enables Deserialize on
# response/event types so we can deserialize adapter responses.
dap = { version = "0.4.1-alpha1", features = ["client"], optional = true }
# libkrun-sys: FFI bindings for libkrun (hardware-isolated microVM sandbox).
# Requires libkrun.so and libkrunfw.so installed on the system.
libkrun-sys = { version = "0.9.5", optional = true }
# russh: pure-Rust SSH client (no libssh2/OpenSSL — uses the `ring` crypto
# backend so the build needs no system OpenSSL or cmake). Used by the
# microVM sandbox to execute commands inside the guest VM.
russh = { version = "0.62.4", default-features = false, features = ["ring"], optional = true }
# sha2 + hex: OCI layer digest verification for the microVM sandbox.
# Every blob downloaded from the registry is SHA-256 hashed and compared
# against the manifest's declared digest before extraction.
sha2 = "0.10"
hex = { version = "0.4", optional = true }
# base64: decode OpenSSH-format public keys for host-key verification.
base64 = "0.22"
# YAML parser for skill frontmatter (replaces hand-rolled parser in
# `src/extras/skills/format.rs`). `yaml-rust2` is the maintained fork
# of the abandoned `yaml-rust` crate, fully YAML 1.2 compliant.
yaml-rust2 = "0.11"

# Fuzzy matcher. Used by the Ctrl-F search (test-gated until the
# interactive feature is wired in) and by the few-shot tool-exemplar
# retriever (`agent::exemplars`), which scores curated tool-use
# examples against the user's task to inject the most relevant ones.
nucleo-matcher = "0.3"
url = "2"
vt100 = "0.16.2"

# --- compression-engine deps (always-on; was optional via `compression` feature) ---
bm25 = { version = "2.3.2" }
csv = { version = "1.4.0" }
gaoya = { version = "0.2.0" }
once_cell = { version = "1.21.4" }
stop-words = { version = "0.10.0" }
toml = { version = "1.1.2" }
toon-format = { version = "0.5.0", default-features = false }
unicode-normalization = { version = "0.1.25" }
unicode-segmentation = { version = "1.13.3" }
whatlang = { version = "0.18.0" }

[dev-dependencies]
tokio = { version = "1", features = ["test-util"] }
ctor = "1"

# Profiles tuned with cargo-wizard, then adjusted for dirge's constraints.
#
# `release` — the SHIPPED binary, optimized for runtime SPEED (cargo-wizard
# `fast-runtime`): opt-level=3 + fat LTO + a single codegen unit, still
# `strip`ped so it stays lean. The binary is small enough that we favor
# speed over squeezing the last bytes (the old `opt-level="z"` min-size
# tuning). Both `cargo install dirge-agent` AND the prebuilt release
# binaries use this profile, so every shipped artifact is the fast one.
#
# NOTE: deliberately NOT `panic = "abort"` (which `fast-runtime`/`min-size`
# suggest): the Janet plugin worker relies on `std::panic::catch_unwind`
# (src/plugin/worker.rs) to contain panics from unsafe FFI, and background
# tokio tasks (subagents, background shells) rely on a panicking task NOT
# aborting the whole process. `panic = "abort"` would break both.
#
# We also deliberately do NOT add `-Ctarget-cpu=native`: it would make the
# distributed binary SIGILL on any CPU older than the build host. A user
# building for their OWN machine can set `RUSTFLAGS="-Ctarget-cpu=native"`.
[profile.release]
opt-level = 3
lto = true
codegen-units = 1
strip = true
debug = false

# `dev` — fast iterate/test loop (cargo-wizard `fast-compile`). `debug = 0`
# drops debuginfo generation for faster builds; pair with the linker /
# split-debuginfo settings in `.cargo/config.toml`. If you need line numbers
# in a dev backtrace, set `debug = "line-tables-only"`.
[profile.dev]
debug = 0