bashkit/Cargo.toml at main · everruns/bashkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
# Bashkit - Awesomely fast virtual sandbox with bash and file system
# Part of the Everruns ecosystem
# See specs/ for design decisions

[workspace]
resolver = "2"
members = ["crates/*"]

[workspace.package]
version = "0.3.0"
edition = "2024"
license = "MIT"
authors = ["Everruns"]
repository = "https://github.com/everruns/bashkit"
description = "Awesomely fast virtual sandbox with bash and file system"
keywords = ["bash", "virtual", "ai", "agent", "everruns"]
categories = ["command-line-utilities", "parser-implementations"]

[workspace.dependencies]
# Async runtime
# Base features are WASM-compatible; crates needing more (rt-multi-thread, fs, net, process)
# add them in their own Cargo.toml or via [target.'cfg(...)'.dependencies].
tokio = { version = "1", features = ["sync", "macros", "io-util", "rt", "time"] }
async-trait = "0.1"
futures-core = "0.3"
futures-util = "0.3"

# Error handling
thiserror = "2"
anyhow = "1"

# Serialization
serde = { version = "1", features = ["derive"] }
serde_json = "1"

# JSON processing (jq) - verified embeddable
jaq-core = "3.0"
jaq-std = "3.0"
jaq-json = "2.0"

# HTTP client (for curl and API calls)
# IMPORTANT: rustls-no-provider keeps the aws-lc-rs C crypto out of the dep tree so
# we don't depend on cross-toolchain glibc headers (e.g. AT_HWCAP2 on aarch64
# manylinux). The ring provider below is installed at runtime in
# bashkit::network::client.
reqwest = { version = "0.13", default-features = false, features = ["json", "rustls-no-provider", "stream"] }
rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12", "logging"] }

# Regex
regex = "1"
fancy-regex = "0.18"

# Date/Time
chrono = "0.4"

# Compression
flate2 = "1"

# Base64 encoding
base64 = "0.22"

# Checksums (md5sum, sha256sum, etc.)
md-5 = "0.11"
sha1 = "0.11"
sha2 = "0.11"

# Ed25519 signing (bot-auth request signing)
ed25519-dalek = { version = "2", features = ["rand_core"] }
rand = "0.10"
zeroize = "1"

# CLI
clap = { version = "4", features = ["derive"] }

# Testing
tokio-test = "0.4"
tempfile = "3"
pretty_assertions = "1"
insta = "1"

# Fault injection (security testing)
fail = "0.5"

# Property-based testing
proptest = "1"

# JSON Schema generation
schemars = "1"

# Logging/tracing
tracing = "0.1"
tower = { version = "0.5", features = ["util"] }

# SSH client (for ssh/scp/sftp builtins)
russh = "0.60"
russh-keys = "0.49"

# Embedded SQLite engine (Turso, pure Rust). Upstream is BETA — gated behind
# the `sqlite` feature and disabled by default; see specs/sqlite-builtin.md.
turso_core = "0.5"

# Serial test execution
serial_test = "3"

# Python bindings
pyo3 = { version = "0.28.3", features = ["extension-module", "generate-import-lib"] }
pyo3-async-runtimes = { version = "0.28", features = ["tokio-runtime"] }

# JavaScript/Node.js bindings (NAPI-RS)
napi = { version = "3.8.6", default-features = false, features = ["napi6", "compat-mode", "tokio_rt"] }
napi-derive = "3.5.5"
napi-build = "2"

[profile.release]
lto = "thin"
codegen-units = 1
# Security: interpreter relies on catch_unwind around builtins.
# Keep release unwinding enabled so panic containment works.
panic = "unwind"
strip = "symbols"