eidetic-engine 0.15.2

# Empty [workspace] table opts this package OUT of any containing workspace
# found by Cargo's parent-directory autodiscovery. AGENTS.md is explicit:
# "single binary crate with a library surface in the same package; not a
# workspace in phase 0". On RCH workers, the synced project sometimes
# lands under /data/projects/ which contains an unrelated FCP workspace
# Cargo.toml at the parent — without this opt-out, cargo treats eidetic
# as a member of that workspace and tries to load its (missing) crates.
#
# `exclude` keeps cargo's subdirectory autodiscovery from picking up the
# fuzz/ subproject (its own [package]) and the franken_publish_status
# test fixture (its own nested [workspace]). Without these excludes,
# cargo would try to inherit workspace.package.license-file from
# eidetic's root, which is undefined on purpose — see
# tests/fixtures/franken_publish_status/fnx_repo/Cargo.toml.
[workspace]
exclude = [
    "fuzz",
    "tests/fixtures",
    ".ci",
    "crates/determinism",
]

[package]
name = "eidetic-engine"
version = "0.15.2"
edition = "2024"
license = "MIT"
description = "Durable, local-first, explainable memory for coding agents."
repository = "https://github.com/Dicklesworthstone/eidetic_engine_cli"
homepage = "https://github.com/Dicklesworthstone/eidetic_engine_cli"
documentation = "https://docs.rs/eidetic-engine"
readme = "README.md"
keywords = ["memory", "agents", "cli", "local-first", "search"]
categories = ["command-line-utilities", "database", "development-tools"]
default-run = "ee"
autotests = false
publish = true
include = [
    "/src/**",
    "/docs/schemas/**",
    "/tests/fixtures/swarm_scale/workloads.json",
    "/Cargo.toml",
    "/Cargo.lock",
    "/README.md",
    "/LICENSE",
    "/CHANGELOG.md",
    "!tests/artifacts/*",
    "!.beads.snapshot_*",
    "!.beads.snapshot_*/*",
    "!FINAL_AUDIT_REPORT",
    "!FINAL_AUDIT_REPORT.*",
    "!.audit_log",
    "!.audit_log/*",
    "!*.audit_log",
    "!.*-report.json",
    "!perf-target/*",
    "!perf.data",
    "!*.profraw",
    "!*.json,bak",
    "!tmp/*",
    "!temp/*",
    "!.tmp/*",
    "!.temp/*",
]

[lib]
name = "ee"
path = "src/lib.rs"

[[bin]]
name = "ee"
path = "src/main.rs"

# Feature flags. See docs/feature_flag_registry.md for status, gate surface,
# and owner-bead per flag. tests/feature_flag_registry_in_sync.rs enforces
# 1:1 correspondence with that registry. `[]` as a value means "no optional
# Cargo dependencies" — a flag can still cfg-gate code in src/ with `[]` value.
[features]
default = ["fts5", "json", "embed-fast", "lexical-bm25", "graph"]
fts5 = ["frankensearch/fts5"]
# Reserved (status: reserved). No cfg-gates in src/ today. Reserved for a
# future "JSON-only minimal output" build profile. See docs/feature_flag_registry.md.
json = []
embed-fast = ["frankensearch/model2vec", "frankensearch/download"]
# Blocked: frankensearch/fastembed currently pulls reqwest/tokio/hyper/tower.
# Do not expose an embed-quality feature until that tree is forbidden-dep clean.
lexical-bm25 = ["frankensearch/lexical-tantivy"]
# Active. Gates ~42 cfg-gated functions under src/graph/mod.rs. Default-on.
graph = []
# Active test-only gate for the heavyweight Python NetworkX differential suite.
# This feature pulls no Rust dependencies and is intended for nightly CI or
# explicit local/RCH runs where Python + networkx are available.
differential-networkx = []
# Active. Gates `pub mod mcp;` at src/lib.rs:23 (the full 2.6k-LOC MCP adapter).
# Opt-in via `cargo install eidetic-engine --features mcp` per README.
mcp = []
# Reserved (status: reserved). No cfg-gates in src/ today. Reserved for the
# future localhost HTTP/SSE adapter described in AGENTS.md §Module Layout.
serve = []
# Reserved (status: reserved). The default build already includes lightweight
# deterministic science metrics and the read-only `ee analyze science-status`
# surface; this empty flag is retained for future heavier analytics backends
# (EE-171). See docs/feature_flag_registry.md and docs/silent-fallback-inventory.md.
science-analytics = []

[dependencies]
asupersync = { version = "=0.5.0", default-features = false, features = ["tracing-integration"] }
arc-swap = { version = "=1.9.2" }
base64 = { version = "0.23.1", default-features = false, features = ["std"] }
blake3 = { version = "1.5" }
crossbeam-queue = { version = "0.3.14" }
determinism = { package = "ee-determinism", version = "0.1.0" }
franken-agent-detection = { version = "=0.2.3", default-features = false }
chrono = { version = "0.4.45", default-features = false, features = ["clock", "std"] }
clap = { version = "4.6.1", features = ["derive"] }
clap_complete = { version = "4.6.1" }
fnx-algorithms = { version = "0.3.0" }
fnx-classes = { version = "0.3.0" }
fnx-runtime = { version = "0.3.0", default-features = false, features = ["asupersync-integration"] }
frankensearch = { version = "0.6.0", default-features = false, features = ["hash", "storage", "model2vec", "download", "rerank", "native"] }
# EE's schema uses json_valid() in unconditional CHECK constraints. SQLModel
# intentionally disables FrankenSQLite's default extension set, so unify the
# JSON feature explicitly instead of depending on a transitive default.
fsqlite = { version = "0.4.1", default-features = false, features = ["json"] }
# MSRV-compatible, safe advisory file locking for doctor fix/undo coordination.
# Keep async features disabled: Tokio/async-std/smol are forbidden here.
fs4 = { version = "1.1.0", default-features = false, features = ["sync"] }
ed25519-dalek = { version = "=3.0.0", default-features = false, features = ["fast", "zeroize"] }
getrandom = { version = "0.4.2" }
zeroize = { version = "=1.9.0", default-features = false, features = ["alloc"] }
regex-lite = { version = "0.1" }
# Direct libc remains available for low-level platform adapters; daemon gates
# use safe wrappers in source to keep the crate-level unsafe-code ban intact.
libc = { version = "0.2" }
ring = { version = "0.17" }
roaring = { version = "0.11.4" }
rustix = { version = "1.1.4", features = ["fs", "net", "process"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = { version = "1.0.149", features = ["arbitrary_precision", "preserve_order"] }
serde_yaml = { version = "0.9.34" }
sha2 = { version = "0.11.0" }
signal-hook = { version = "0.4" }
sqlmodel-core = { version = "0.5.0" }
sqlmodel-frankensqlite = { version = "0.5.0" }
tempfile = { version = "3.27.0" }
# Real BPE tokenization for context pack budget enforcement
# (eidetic_engine_cli-aitk). Default features only; the `async-openai`
# feature would pull tokio/reqwest/hyper which are forbidden here.
tiktoken-rs = { version = "0.12.0", default-features = false }
toon = { package = "tru", version = "=0.2.4", default-features = false }
toml_edit = { version = "0.25.15", default-features = false, features = ["parse", "display"] }
tracing = { version = "0.1.44" }
tracing-subscriber = { version = "0.3.23", features = ["env-filter", "json"] }
# NFC normalization for policy tag/secret detection (bd-17c65.3.3 / C3).
# Already in dep tree transitively; explicit dep documents the contract.
unicode-normalization = { version = "0.1" }
uuid = { version = "1.26.1", features = ["v7"] }
# Direct dependency for deterministic pack-compression dictionary training.
# The default zstd features include zdict_builder; no forbidden async or HTTP
# stack is introduced.
zstd = { version = "0.14.0" }
# Pure-Rust tar extraction to unpack the reranker model artifact (.tar.zst) into a
# loadable model dir during `ee model fetch`. default-features off drops the
# unix-only xattr extra so it cross-compiles to windows-msvc cleanly.
tar = { version = "0.4", default-features = false }

# Safe SID/DACL wrappers for the T5.9/T2.1 Windows secure-file adapter.
# Target-gated so Unix builds do not pull winapi. The crate confines its
# own `unsafe` internally; ee stays `#![forbid(unsafe_code)]`.
[target.'cfg(windows)'.dependencies]
windows-permissions = { version = "0.2.4" }

[dev-dependencies]
# asupersync's `Cx::for_testing()` (and the other `for_testing*`/`for_request*`
# constructors) are gated behind `cfg(any(test, feature = "test-internals"))`
# since 0.3.6 (br-asupersync-2x6hbi) so external crates cannot mint an ambient
# full-capability `Cx` in production. Our unit/integration/bench suites still
# rely on those constructors, so we opt in here: as a dev-dependency the feature
# is unified into test/bench/`--all-targets` builds only and stays OUT of the
# release binary (which uses the detached, capability-less production Cx path).
asupersync = { version = "=0.5.0", default-features = false, features = ["tracing-integration", "test-internals"] }
criterion = { version = "0.8.2", features = ["html_reports"] }
insta = { version = "1.48.0", features = ["json"] }
proptest = { version = "1.9.0", default-features = false, features = ["std"] }
pulldown-cmark = { version = "0.13.4", default-features = false, features = ["html"] }
static_assertions = { version = "1.1.0" }

[[bench]]
name = "remember"
harness = false

[[bench]]
name = "search"
harness = false

[[bench]]
name = "why"
harness = false

[[bench]]
name = "why_toon_token_count"
harness = false

[[bench]]
name = "outcome"
harness = false

[[bench]]
name = "context"
harness = false

[[bench]]
name = "tiered_recall"
harness = false

[[bench]]
name = "recall"
harness = false

[[bench]]
name = "primer"
harness = false

[[bench]]
name = "context_stream_bench"
path = "benches/context_stream.rs"
harness = false

[[bench]]
name = "context_with_ppr"
harness = false

[[bench]]
name = "pack_size"
harness = false

[[bench]]
name = "status"
harness = false

[[bench]]
name = "workspace_init"
harness = false

[[bench]]
name = "team_confed"
harness = false

[[bench]]
name = "audit_query"
harness = false

[[bench]]
name = "index_rebuild"
harness = false

[[bench]]
name = "concurrent_writes"
harness = false

[[bench]]
name = "import_cass"
harness = false

[[bench]]
name = "link"
harness = false

[[bench]]
name = "graph_pagerank"
harness = false

[[bench]]
name = "graph_minhash_rank"
harness = false

[[bench]]
name = "graph_ppr"
harness = false

[[bench]]
name = "graph_louvain"
harness = false

[[bench]]
name = "graph_ktruss"
harness = false

[[bench]]
name = "graph_gomory_hu"
harness = false

[[bench]]
name = "roaring_vs_json_cache_key"
harness = false

[[bench]]
name = "graph_hits"
harness = false

[[bench]]
name = "graph_refresh_cooperative"
harness = false

[[bench]]
name = "graph_full_stack"
harness = false

[[bench]]
name = "graph_scale_policy"
harness = false

[[bench]]
name = "agent_profile"
harness = false

[[bench]]
name = "consolidator"
harness = false

[[bench]]
name = "curate_candidates"
harness = false

[[bench]]
name = "ulid_tiebreak"
harness = false

[[bench]]
name = "adaptive_budget"
harness = false

[[bench]]
name = "cass_prefetch"
harness = false

[[bench]]
name = "daemon_protocol"
harness = false

[[bench]]
name = "daemon_dispatch"
harness = false

[[bench]]
name = "daemon_round_trip"
harness = false

# Integration modules share five links. Keep snapshot-name-sensitive tests,
# process-global tracing/cwd tests, self-spawning tests, and focused platform
# gates separate. tests/suites/inventory.rs rejects missing/duplicate root files.
[[test]]
name = "integration_a_d"
path = "tests/suites/integration_a_d.rs"

[[test]]
name = "integration_e_f"
path = "tests/suites/integration_e_f.rs"

[[test]]
name = "integration_g_m"
path = "tests/suites/integration_g_m.rs"

[[test]]
name = "integration_n_r"
path = "tests/suites/integration_n_r.rs"

[[test]]
name = "integration_s_z"
path = "tests/suites/integration_s_z.rs"

[[test]]
name = "agent_profile_e2e"
path = "tests/agent_profile_e2e.rs"

[[test]]
name = "cache_hotset_contract"
path = "tests/cache_hotset_contract.rs"

[[test]]
name = "conformance"
path = "tests/conformance.rs"

[[test]]
name = "context_stream"
path = "tests/context_stream.rs"

[[test]]
name = "contracts"
path = "tests/contracts.rs"

[[test]]
name = "cross_platform_determinism"
path = "tests/cross_platform_determinism.rs"

[[test]]
name = "e2e_backup_restore_roundtrip"
path = "tests/e2e_backup_restore_roundtrip.rs"

[[test]]
name = "e2e_core_workflow"
path = "tests/e2e_core_workflow.rs"

[[test]]
name = "e2e_daemon_recovery"
path = "tests/e2e_daemon_recovery.rs"

[[test]]
name = "e2e_graceful_degradation"
path = "tests/e2e_graceful_degradation.rs"

[[test]]
name = "e2e_multi_agent_writers"
path = "tests/e2e_multi_agent_writers.rs"

[[test]]
name = "e2e_serve_localhost"
path = "tests/e2e_serve_localhost.rs"

[[test]]
name = "e2e_windows_smoke"
path = "tests/e2e_windows_smoke.rs"

[[test]]
name = "error_envelope_golden"
path = "tests/error_envelope_golden.rs"

[[test]]
name = "error_recovery_conformance_e2e"
path = "tests/error_recovery_conformance_e2e.rs"

[[test]]
name = "failure_triage"
path = "tests/failure_triage.rs"

[[test]]
name = "harness_hook_install_audit"
path = "tests/harness_hook_install_audit.rs"

[[test]]
name = "json_contract_snapshots"
path = "tests/json_contract_snapshots.rs"

[[test]]
name = "mcp_parity"
path = "tests/mcp_parity.rs"

[[test]]
name = "mesh_responder_broker_loopback"
path = "tests/mesh_responder_broker_loopback.rs"

[[test]]
name = "mesh_transport_session_loopback"
path = "tests/mesh_transport_session_loopback.rs"

[[test]]
name = "model_bundled_embedding_cli_e2e"
path = "tests/model_bundled_embedding_cli_e2e.rs"

[[test]]
name = "networkx_differential"
path = "tests/networkx_differential.rs"

[[test]]
name = "ownership_snapshot"
path = "tests/ownership_snapshot.rs"

[[test]]
name = "pack_quality_contracts"
path = "tests/pack_quality_contracts.rs"

[[test]]
name = "perf_compare_golden"
path = "tests/perf_compare_golden.rs"

[[test]]
name = "proof_verify_core"
path = "tests/proof_verify_core.rs"

[[test]]
name = "renderer_parity_matrix"
path = "tests/renderer_parity_matrix.rs"

[[test]]
name = "search_conformal_e2e"
path = "tests/search_conformal_e2e.rs"

[[test]]
name = "support_bundle_perf_compare"
path = "tests/support_bundle_perf_compare.rs"

[[test]]
name = "test_tracing_support_smoke"
path = "tests/test_tracing_support_smoke.rs"

[[test]]
name = "cass_contracts"
path = "tests/conformance/cass_contracts.rs"

[[test]]
name = "query_v1_matrix"
path = "tests/conformance/query_v1_matrix.rs"

[[test]]
name = "witness_retention_e2e"
path = "tests/contracts/witness_retention_e2e.rs"

# Lint Policy (EE-002)
# CI runs: cargo clippy --all-targets -- -D warnings
# See AGENTS.md for rationale.

[lints.rust]
unsafe_code = "forbid"

[lints.clippy]
# Token walks index parallel vectors by one counter.
needless_range_loop = "allow"
# Core safety lints - discourage panic paths in library code
dbg_macro = "warn"
todo = "warn"
unwrap_used = "warn"
expect_used = "warn"

# Tests may use #[allow(clippy::unwrap_used)] or #[allow(clippy::expect_used)]
# when the context makes the assertion obvious

# Nightly Clippy drift baseline, captured from the 2026-06-05 CI wave.
# These are style/mechanical lints whose cleanup should be handled in
# focused source slices instead of blocking every unrelated readiness run.
approx_constant = "allow"
bool_assert_comparison = "allow"
cmp_owned = "allow"
collapsible_if = "allow"
collapsible_match = "allow"
collapsible_str_replace = "allow"
derivable_impls = "allow"
doc_lazy_continuation = "allow"
double_must_use = "allow"
explicit_auto_deref = "allow"
field_reassign_with_default = "allow"
if_same_then_else = "allow"
io_other_error = "allow"
iter_cloned_collect = "allow"
large_enum_variant = "allow"
let_and_return = "allow"
manual_contains = "allow"
manual_div_ceil = "allow"
manual_ok_err = "allow"
manual_saturating_arithmetic = "allow"
map_clone = "allow"
needless_as_bytes = "allow"
needless_borrow = "allow"
needless_borrows_for_generic_args = "allow"
needless_lifetimes = "allow"
needless_option_as_deref = "allow"
needless_return = "allow"
obfuscated_if_else = "allow"
ptr_arg = "allow"
question_mark = "allow"
redundant_guards = "allow"
result_large_err = "allow"
single_match = "allow"
too_many_arguments = "allow"
type_complexity = "allow"
unnecessary_lazy_evaluations = "allow"
unnecessary_map_or = "allow"
unusual_byte_groupings = "allow"
useless_conversion = "allow"
vec_init_then_push = "allow"
while_let_loop = "allow"