Cargo.toml

[workspace]
resolver = "3"
members = ["crates/strypt-core", "crates/strypt"]

[workspace.package]
# 0.0.x deliberately: the crates.io names are held by real code, not a stub (docs/ROADMAP.md
# Phase 4), but Phase 3 hardening has not happened and the version must not imply otherwise.
version = "0.1.1"
edition = "2024"
# MSRV policy: current stable minus two releases. House policy, NOT an industry norm —
# see docs/DECISIONS.md ADR-0013 before citing it anywhere.
rust-version = "1.95"
license = "MIT OR Apache-2.0"
repository = "https://github.com/FadeHack/strypt"
authors = ["The strypt Contributors"]
# Inherited paths resolve against the workspace root, so both crates render the same README —
# including its status block. That block is the honest account of what is and is not done, and
# a crates.io page without it would overstate the project by omission.
readme = "README.md"
keywords = ["metadata", "exif", "privacy", "xmp", "sanitize"]

[workspace.dependencies]
# Every dependency requires an ADR (ADR-0008). Versions were re-verified against crates.io on
# 2026-08-19, at Phase 1 start, as docs/ARCHITECTURE.md §4 requires — not carried over from
# the Phase 0 snapshot on trust.
thiserror = "2.0.20"   # ADR-0018. strypt-core only; anyhow is banned there.
# ADR-0018. `default-features = false` drops `rayon` and `chrono-clock`: parallel object
# processing would put deterministic output at risk (docs/TESTING_STRATEGY.md §1, invariant 4)
# and a metadata scrubber has no business reading the wall clock.
lopdf = { version = "0.44.0", default-features = false }
# ADR-0028. Decompression only — the ZIP layer never compresses on output, so no deflate
# encoder is needed. `default-features = false` plus an explicit `rust_backend` pins the
# backend to the pure-Rust `miniz_oxide` and never a C zlib: the memory-safety argument in
# docs/PRD.md §4 is the whole reason this crate is declared rather than a C-backed one.
# Already in the resolved graph at 1.1.9 by way of `lopdf`; this promotes it to declared.
# Residual risk recorded in ADR-0028: feature unification means any future dependency
# enabling flate2's `zlib` feature gets the C backend for the whole graph regardless.
flate2 = { version = "1.1.9", default-features = false, features = ["rust_backend"] }
# ADR-0028. The CRC-32 every ZIP entry header carries. Also already transitive via `flate2`.
crc32fast = "1.5.0"
# Front-end only — never in strypt-core (ADR-0003). Versions verified 2026-08-19.
clap = { version = "4.6.6", features = ["derive"] }
serde_json = "1.0.151"

# Lints applied across the workspace. The panic-capable lints are denied in strypt-core
# only (ADR-0006) — see that crate's manifest.
[workspace.lints.rust]
unsafe_code = "forbid"
missing_docs = "warn"

[workspace.lints.clippy]
all = { level = "deny", priority = -1 }
pedantic = { level = "warn", priority = -1 }

[profile.release]
# Keep debug assertions off but overflow checks ON in release: an integer overflow while
# parsing an attacker-controlled length field should abort, not silently wrap into a
# nonsensical offset. Costs a little speed, removes a bug class (ADR-0006).
overflow-checks = true
lto = true
codegen-units = 1
strip = true