Cargo.toml

[workspace]
members = [
    "crates/neomacs",
    "crates/neomacs-terminfo",
    "crates/neomacs-allocator",
    "crates/neomacs-diagnostics",
    "crates/neomacs-display-protocol",
    "crates/neomacs-display-runtime",
    "crates/neomacs-font-materializer",
    "crates/neomacs-gui-tests",
    "crates/neomacs-layout-engine",
    "crates/neomacs-melpa-test-support",
    "crates/neomacs-melpa-tests",
    "crates/neomacs-parity-reference",
    "crates/neomacs-perf",
    "crates/neomacs-renderer-wgpu",
    "crates/neomacs-test-fonts",
    "crates/neomacs-test-env",
    "crates/neomacs-test-oracle",
    "crates/neomacs-infra",
    "crates/neomacs-tui-tests",
    "crates/neomacs-video",
    "crates/neomacs-video-model",
    "crates/neomacs-webview",
    "crates/neovm-core",
    "crates/neovm-host-abi",
    "crates/neovm-oracle-tests",
    "crates/neovm-worker",
    "crates/xtask",
]
default-members = [
    "crates/neomacs",
    "crates/xtask",
]
resolver = "2"

# Distribution capability policy shared by `xtask` and `flake.nix`.  Rust
# decodes these strings into closed enums before planning a build; Nix reads
# the same TOML table to select Cargo features and native inputs. Do not
# duplicate this policy in either caller.
[workspace.metadata.neomacs-production-capabilities]
schema-version = 1

[workspace.metadata.neomacs-production-capabilities.linux]
cargo-features = ["video"]
video-backend = "linked-gstreamer"

[workspace.metadata.neomacs-production-capabilities.darwin]
# The inline browser is the system WKWebView (`crates/neomacs-webview`,
# `platform/macos`); nothing to install, so production builds ship it and
# `xwidget-internal` can be provided honestly.
cargo-features = ["webview"]
video-backend = "none"

[workspace.metadata.neomacs-production-capabilities.windows]
cargo-features = ["windows-tools"]
video-backend = "none"

# Configuration for cross-rs (`cross`), folded in from a root-level
# Cross.toml; cargo itself ignores metadata.* tables.
[workspace.metadata.cross.build.env]
passthrough = ["CARGO_INCREMENTAL"]

[workspace.metadata.cross.target.x86_64-pc-windows-gnu]
image = "ghcr.io/cross-rs/x86_64-pc-windows-gnu:edge"

[workspace.package]
version = "0.0.20"
edition = "2024"
authors = ["Eval Exec <execvy@gmail.com>"]
license = "GPL-3.0-or-later"
repository = "https://github.com/eval-exec/neomacs"

# Lint baseline shared by the frontend crates that opt in with `[lints]
# workspace = true` (display-protocol, layout-engine, renderer-wgpu,
# display-runtime, neomacs). Deliberately modest: Rust defaults plus an
# explicit `unsafe_op_in_unsafe_fn` warn, with Clippy's default lints left at
# warn. CI runs `clippy -- -D warnings`, which promotes them to hard errors.
# The neovm-* crates do NOT opt in, so their lint behavior is unchanged.
[workspace.lints.rust]
unsafe_op_in_unsafe_fn = "warn"

[workspace.lints.clippy]
# Clippy default-group lints stay at their default level (warn). Bulk categories
# that are impractical to resolve without restructuring (e.g. wide FFI /
# scene-builder signatures) are handled with crate- or item-scoped `#[allow]`
# at each site with a justification, rather than being escalated or muted here.

[workspace.dependencies]
zip = { version = "9.1", default-features = false, features = ["deflate"] }
# Internal crates
neomacs-terminfo = { path = "crates/neomacs-terminfo" }
neomacs-allocator = { path = "crates/neomacs-allocator" }
neovm-core = { path = "crates/neovm-core", default-features = false }
neovm-host-abi = { path = "crates/neovm-host-abi" }
neovm-oracle-tests = { path = "crates/neovm-oracle-tests" }
neomacs-display-runtime = { path = "crates/neomacs-display-runtime", default-features = false }
neomacs-display-protocol = { path = "crates/neomacs-display-protocol", default-features = false }
neomacs-font-materializer = { path = "crates/neomacs-font-materializer" }
neomacs-test-fonts = { path = "crates/neomacs-test-fonts" }
neomacs-layout-engine = { path = "crates/neomacs-layout-engine", default-features = false }
neomacs-video = { path = "crates/neomacs-video", default-features = false }
neomacs-video-model = { path = "crates/neomacs-video-model" }
neomacs-webview = { path = "crates/neomacs-webview", default-features = false }
neomacs-renderer-wgpu = { path = "crates/neomacs-renderer-wgpu", default-features = false }
neomacs-diagnostics = { path = "crates/neomacs-diagnostics", default-features = false }
neomacs-perf = { path = "crates/neomacs-perf", default-features = false }
neomacs-test-env = { path = "crates/neomacs-test-env" }
neomacs-test-oracle = { path = "crates/neomacs-test-oracle" }
neomacs-infra = { path = "crates/neomacs-infra" }
neomacs-melpa-test-support = { path = "crates/neomacs-melpa-test-support" }
neomacs-parity-reference = { path = "crates/neomacs-parity-reference" }
neomacs-tui-tests = { path = "crates/neomacs-tui-tests" }
neomacs-gui-tests = { path = "crates/neomacs-gui-tests" }

# Native build glue
glib = "0.22"

# Cranelift is one API-coupled release train: these crates exchange nominal IR
# types and must move together. Dependabot groups the family, and xtask verifies
# that every member stays on the same minor release line.
cranelift-codegen = "0.134.3"
cranelift-frontend = "0.134.3"
cranelift-jit = "0.134.3"
cranelift-module = "0.134.3"
cranelift-object = "0.134.3"
cranelift-native = "0.134.3"

# Logging / tracing
tracing = { version = "0.1", features = ["attributes"] }
tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt", "registry"] }
tracing-log = "0.2"
tracing-appender = "0.2"
tracing-test = "0.2.6"
vergen-gitcl = { version = "10.0.3", default-features = false, features = ["cargo", "rustc"] }

# Concurrency & threading
crossbeam-channel = "0.5"
crossbeam-deque = "0.8"
rayon = "1"
signal-hook = "0.4"

# FFI / system
libc = "0.2"
errno = "0.3"
# The X11 keysym registry as data: naming a function key is GNU's
# `XKeysymToString` tier of `modify_event_symbol`, and this is that table
# without an X11 or xkbcommon dependency, so it works on every platform.
keysymdefs = "0.2"
rustix = { version = "1", features = ["event", "fs"] }
inotify = "0.11"
fs4 = { version = "1", features = ["sync"] }
sysinfo = "0.39"

# Crypto
aes = "0.9.1"
cbc = { version = "0.2.1", features = ["alloc", "block-padding"] }
sha1 = "0.11"
sha2 = "0.11"
hmac = "0.13"
md-5 = "0.11"
getrandom = "0.4"
base64 = "0.22"
x509-parser = "0.18"

# Misc
# Rust-native regexp dialect for patterns defined inside Rust. Lisp-visible
# patterns must go through `neovm_core::emacs_core::regex` instead.
native-regex = { package = "regex", version = "1" }
# Direct dep for the regex-emacs multi-literal SIMD prefilter
# (`util::prefilter::Prefilter` — memchr/Teddy/Aho-Corasick auto-select).
# Only the literal-prefilter machinery is needed, so skip the heavy
# nfa/dfa/meta/syntax layers (feature-unified with `regex`'s copy anyway).
regex-automata = { version = "0.4", default-features = false, features = ["std", "perf-literal"] }
memchr = "2"
rustc-hash = "2"
hashbrown = "0.17"
num_enum = "0.7.6"
enum_dispatch = "0.3.13"
enumset = "1.1.14"
enum-map = "3.1.0"
typed-index-collections = "3.5"
strum = { version = "0.28", features = ["derive"] }
unicode_names2 = "3.1.0"
unicode-script = "0.5"
unicode-general-category = "1.1.0"
stacker = "0.1"
dns-lookup = "4"
hostname = "0.4"
network-interface = "2"
libloading = "0.9"
tree-sitter = "0.27.0"
tree-sitter-language = "0.1.7"
fontconfig = "0.11.0"
yeslogic-fontconfig-sys = "6.0.0"
x11-dl = "2.21"
core-foundation = "0.10.1"
core-text = "22.0.0"
dwrote = { version = "0.11.5", default-features = false }
winapi = { version = "0.3", features = ["dwrite"] }
wio = "0.2.2"
sys-locale = "0.3.2"
serde = { version = "1", features = ["derive", "rc"] }
nutype = { version = "0.8", features = ["serde"] }
serde_json = "1"
toml = "1.1"
clap = { version = "4.5", features = ["derive"] }
command-group = "5.0"
linux-perf-data = { version = "0.13", default-features = false }
thiserror = "2.0"
once_cell = "1.19"
cfg-if = "1.0"
bitflags = { version = "2.0", features = ["serde"] }
enumflags2 = "0.7"
bytemuck = { version = "1.18", features = ["derive"] }
memmap2 = "0.9"
image = "0.25"
# Dev-only, `xpm` feature only: an independent XPM3 decoder that
# cross-checks neomacs-renderer-wgpu's XPM decoder against the shipped
# etc/images corpus. GNU stays the specification for that decoder (see
# crates/neomacs-renderer-wgpu/src/xpm.rs), so this is a smoke check and
# never a runtime dependency; the restricted feature set adds no codecs.
image-extras = { version = "0.1", default-features = false, features = ["xpm"] }
# The renderer decodes PNG rows itself for banded decoding, instead of
# handing the file to `image` and waiting for the whole frame. Same
# version `image` itself builds against, so the tree gains no second copy.
png = "0.18"
# The renderer reads baseline JPEG one MCU row at a time, for the same reason
# and through the same `image_bands` seam as `png` above. It is a direct
# dependency only so this crate can name the reader; `[patch.crates-io]` is
# what points the version at the fork that has one, and it is the same
# `zune-jpeg` `image` builds against, so the tree gains no second copy. Its
# `zune_core` is reached through `zune_jpeg::zune_core`, which is the only way
# to be sure the two are the same types.
zune-jpeg = "0.5"
imagesize = "0.15"
# Tests only: `image` 0.25's `jpeg` feature is decode-only, so the renderer's
# JPEG tests encode their own fixtures — baseline and progressive, at sizes
# either side of `BANDING_MIN_PIXELS`.
jpeg-encoder = "0.7"
allsorts = "0.17.0"
encoding_rs = "0.8"

# Compression
flate2 = "1"
tar = "0.4"
ureq = "3"

# Parsing
quick-xml = "0.41"
tl = "0.7"
htmlize = { version = "1.1", default-features = false, features = ["unescape"] }

# Database
rusqlite = { version = "0.40", features = ["bundled"] }

# Arbitrary precision integers (bignum support).
# Uses malachite, a pure-Rust bignum library derived from GMP/FLINT
# algorithms. This avoids C library compilation issues on Windows CI.
malachite = "0.9"

# Fast integer to-decimal formatting (used by the JSON serializer).
itoa = "1.0"

# GPU / windowing
# The fork revision and branch are documented in [patch.crates-io].
winit = "=0.31.0-beta.3"
# "glsl" gates ShaderSource::Glsl, which the render thread needs to compile
# composed Shadertoy-dialect surface shaders (shader_surface.rs).
wgpu = { version = "30", features = ["glsl"] }
# Keep this on the same major version as wgpu: the DMA-BUF importer passes
# wgpu-hal types through wgpu's public HAL interop API.
# Its `gpu-allocator` collaborator also exchanges nominal `windows` COM types;
# `cargo xtask check-dependency-coherence` prevents Cargo updates from resolving
# the two crates onto incompatible Windows binding versions.
wgpu-hal = { version = "30", features = ["vulkan"] }
# Shader-surface WGSL/GLSL validation on the Lisp thread (same version wgpu embeds)
naga = { version = "30", features = ["wgsl-in", "glsl-in"] }
raw-window-handle = "0.6"

# macOS-only: native WKWebView inline backend (`neomacs-webview`).
# Versions track the objc2 0.6 generation winit already pulls in, so the
# dependency graph keeps a single objc2 major.
objc2 = "0.6"
winreg = "0.56"
block2 = "0.6"
objc2-app-kit = { version = "0.3", features = ["NSEvent", "NSView", "NSResponder", "NSWindow"] }
objc2-foundation = { version = "0.3", features = [
    "NSData",
    "NSError",
    "NSGeometry",
    "NSJSONSerialization",
    "NSKeyValueObserving",
    "NSObjCRuntime",
    "NSUUID",
    "NSString",
    "NSURL",
    "NSURLRequest",
    "NSValue",
] }
objc2-web-kit = { version = "0.3", features = [
    "block2",
    "WKContentWorld",
    "WKFrameInfo",
    "WKNavigation",
    "WKNavigationDelegate",
    "WKPreferences",
    "WKScriptMessage",
    "WKScriptMessageHandler",
    "WKUserContentController",
    "WKUserScript",
    "WKWebView",
    "WKWebViewConfiguration",
    "WKWebsiteDataStore",
] }
wayland-backend = { version = "0.3.15", features = ["client_system", "dlopen"] }
wayland-client = { version = "0.31.14", features = ["system", "dlopen"] }
wayland-protocols = { version = "0.32.12", features = ["client", "staging"] }
ash = "0.38"
pollster = "1.0"
resvg = "0.47"
# Same version resvg 0.47 links, so COLR paint graphs rasterize with the
# rasterizer already in the tree rather than a second copy of it.
tiny-skia = "0.12"
svgtypes = "0.16.1"
simplecss = "0.2.2"
cosmic-text = "0.18.2"
# >=0.2.9 required: 0.2.7 rebuilt the TrueType hinting instance for every
# rasterized glyph (dfrg/swash#114 -- default-weight variation coords made the
# hinting-cache key never match, ~7.7% of our redisplay CPU); 0.2.8 fixed that
# but regressed to wrong-size glyphs after cache eviction (dfrg/swash#120);
# 0.2.9 has both fixes.
swash = "0.2.9"
fontdb = "0.23"
ttf-parser = "0.25"
arboard = "3.4"
smithay-clipboard = "0.7.3"

# GStreamer (video)
gstreamer = "0.25"
gstreamer-video = "0.25"
gstreamer-app = "0.25"
gstreamer-allocators = "0.25"
gstreamer-pbutils = "0.25"
objc2-av-foundation = "0.3.2"
objc2-core-foundation = "0.3.2"
objc2-core-graphics = "0.3.2"
objc2-core-text = "0.3.2"
objc2-core-media = "0.3.2"
objc2-core-video = "0.3.2"
objc2-metal = "0.3.2"
windows = "0.62.2"
windows-core = "0.62.2"
webview2-com = "0.39.1"
url = "2"

# Terminal emulation
rio-vt = "0.5.3"
parking_lot = "0.12"
portable-pty = "0.9"
smallvec = "1.13"
static_assertions = "1.1"

# Build dependencies
which = "7.0"
bindgen = "0.72"
pkg-config = "0.3"
regex = "1.12"

# OS pipe
os_pipe = "1.2.3"

# I/O multiplexing (epoll/kqueue/wepoll)
polling = "3"
socket2 = { version = "0.6", features = ["all"] }

# TLS
rustls = { version = "0.23.46", default-features = false, features = ["std", "tls12", "ring"] }
webpki-roots = "1.0"
rustls-pki-types = "1"

# Windows
windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_Globalization", "Win32_Networking_WinSock", "Win32_Security", "Win32_Storage_FileSystem", "Win32_System_Console", "Win32_System_IO", "Win32_System_Threading", "Win32_UI_Input_KeyboardAndMouse"] }

# Dev / test
proptest = "1.6"
expect-test = "1.5.1"
tempfile = "3.27.0"
colored = "3"
wait-timeout = "0.2"

[profile.release]
lto = true
codegen-units = 1
debug = false
# macOS 27's linker emits malformed proc-macro dylibs when Cargo strips their
# debuginfo, which surfaces later as E0463 while loading crates such as strum.
# Keep release artifacts loadable; debug=false still avoids embedding debug info
# in the first place.
strip = "none"

# This test-only crate is a 52 MiB corpus compiled into one test harness.
# Keep production dependencies in release mode without optimizing test bodies.
[profile.release.package.neovm-oracle-tests]
opt-level = 0

# Keep workspace crates fast to compile and easy to debug, while building their
# third-party dependencies with release-like code generation. Cargo package
# overrides cannot set `lto`, `panic`, or `rpath`, so those continue to inherit
# from the dev profile.
# Workspace members: keep what a panic needs, drop what the linker copies.
# Cargo's default dev profile is full DWARF, and it was 61% of every 245 MB
# test binary -- relinked into each of the crate's integration targets.
# `line-tables-only` keeps file:line in backtraces (the test suites read them)
# and `unpacked` leaves the remainder beside the binary instead of inside it.
[profile.dev]
debug = "line-tables-only"
split-debuginfo = "unpacked"

[profile.dev.package."*"]
opt-level = 3
debug = false
strip = "none"
debug-assertions = false
overflow-checks = false
codegen-units = 16
incremental = false

# Apply the same policy to workspace build scripts, proc macros, and their
# dependencies. Non-workspace build dependencies already match the package
# wildcard above; this also covers build targets owned by workspace members.
[profile.dev.build-override]
opt-level = 3
debug = false
strip = "none"
debug-assertions = false
overflow-checks = false
codegen-units = 16
incremental = false

# Optimize interpreter-heavy tests without changing ordinary editor debug builds.
[profile.test.package.neovm-core]
opt-level = 2

# Optimized build driven by a PGO profile. Same codegen settings as release,
# but cargo gives it its own target/release-pgo directory, so a PGO build never
# replaces an ordinary release binary (or invalidates its pdump fingerprint).
# Native Linux x86_64 releases use the xtask-owned generation, default and
# interpreter training passes, merge, and optimized build. xtask supplies the
# exact consumer profile through CARGO_ENCODED_RUSTFLAGS; see
# `cargo xtask fresh-build --profile release-pgo`.
# Other platforms and cross targets use ordinary non-PGO release builds.
[profile.release-pgo]
inherits = "release"

# PGO build in its own target directory, for profiling the configuration
# actually shipped: PGO changes inlining and block layout, so hotspots measured
# on a plain release build do not necessarily hold for release-pgo. Symbols
# come from strip = "none". Debug info stays off because rustc's codegen depends
# on it: on one commit, debug = true changed 15 of the 195 protected functions
# against release, and line-tables-only changed Vm::run_loop. For source-line or
# inline attribution, build a separate arm with
# CARGO_PROFILE_RELEASE_PGO_PROFILING_DEBUG=line-tables-only and never gate
# with it.
[profile.release-pgo-profiling]
inherits = "release-pgo"
debug = false
strip = "none"

# Internal instrumented stage of native Linux x86_64 release PGO. xtask uses
# matching fat-LTO/codegen settings for generation and consumption. Raw profiles
# use bounded LLVM merge pools. After a verified merge, xtask removes raw
# profiles and the instrumented product, retaining the merged profile and
# receipts separately from the optimized product.
# This does not enable PGO on macOS, Windows, or cross targets; those retain
# ordinary release builds, outside this native training/bootstrap pipeline.
# Linux x86_64 CI budget: 4 vCPU / 16 GB RAM; v0.0.18 fat-LTO +
# profile-generate links were SIGTERMed on the hosted runner. Local
# four-core check before pooling/cleanup (2026-10-21, warm host tools): peak RSS
# 9.74/4.51 GiB, full pipeline 47m19s, target growth 50.18 GiB
# (45.10 GiB preparation profiles). Recheck memory, time, and disk
# budgets before changing this recipe; Linux jobs currently allow 2h.
[profile.release-pgo-gen]
inherits = "release"

# Measurement profile for benchmark and census arms. Its codegen matches
# release exactly. The census on one commit found 0 of 195 protected functions
# different with debug off. Full debug info changed 15 of them (Vm::run_loop
# 18166 vs 18176 instructions) and line-tables-only changed run_loop alone, so
# measurements on those builds do not describe the shipped code. Debug info
# also dominated the fat link: peak RSS 22-24 GiB with full DWARF, 9.7 GiB with
# line tables, 5.0 GiB without. Symbols come from strip = "none". For
# source-line or DWARF-inline attribution, build a separate arm with
# CARGO_PROFILE_PROFILING_DEBUG=line-tables-only (or true) and never use it as
# an A/B gate arm.
[profile.profiling]
inherits = "release"
debug = false
strip = "none"

[patch.crates-io]
# Never vendor dependencies into this repository. Always fork the crate on
# GitHub and make changes on the fork's `patch` branch. Reference an exact Git
# revision here and document the branch beside each dependency.
# Fork branch: patch (includes Wayland/X11 fixes, continuous XI2 units, and Windows precision touchpad panning).
winit = { git = "https://github.com/eval-exec/winit", rev = "2290f91c602f8efdf102972457a25e8b6e36f90c" }
# Fork branch: patch (based on the 0.12.0 release, 1bddc226).
# hide() pins the decoration buffer scale to 1 before detaching, so Weston does
# not reject the coalesced state with wl_surface invalid_size at scale 2 (decorated fullscreen).
sctk-adwaita = { git = "https://github.com/eval-exec/sctk-adwaita", rev = "2cf76b09b5c2044305baa493d9929fe8d5a8856c" }
# Fork branch: neomacs-present-timing.
# Native presentation IDs/timestamps; see the Vulkan timing seam in this fork.
wgpu-hal = { git = "https://github.com/eval-exec/wgpu", rev = "9717f9fe277beec2c98df550662a626f8fc0248c" }
# Fork branch: patch (based on neomacs-variable-weight-match).
# Scoped font-cache insertion is maintained in the cosmic-text fork.
cosmic-text = { git = "https://github.com/eval-exec/cosmic-text", rev = "5951ae9b0a4c794e594c56f596ba04e5f57416a1" }
# Fork branch: fix/bundled-zlib-include.
freetype-sys = { git = "https://github.com/eval-exec/freetype-sys", rev = "a4eb0a7cf08d9b503bda7d7261c97f8973d34bf1" }
# Fork branch: patch (based on the 0.5.15 release revision, 31d81fed).
# Row-wise baseline JPEG: `McuRowReader` hands back one MCU row at a time, and
# `is_progressive` is public so a progressive image can be routed to the
# whole-image path instead. See `image_bands`'s JPEG arm. Both crates are
# listed because the fork is a workspace and `zune-jpeg` reaches `zune-core` by
# path, so patching only the decoder leaves `image` -- which names `zune-core`
# itself -- holding a second copy whose `ZCursor` is a different type. That
# revision's `crates/zune-jpeg` and `crates/zune-core` are otherwise identical
# to the registry's `zune-jpeg` 0.5.15 and `zune-core` 0.5.1.
zune-jpeg = { git = "https://github.com/eval-exec/zune-image", rev = "39dd805e32d74b2092405b5da0bec86747f04e34" }
zune-core = { git = "https://github.com/eval-exec/zune-image", rev = "39dd805e32d74b2092405b5da0bec86747f04e34" }