# The desktop shell remains a separate Cargo world with its own lockfile and
# target directory. Root-only Cargo commands must not resolve GTK/WebKit/Tauri,
# and desktop release/coverage lanes intentionally manage this graph on their
# own. The root virtual workspace excludes this directory.
[workspace]

[package]
name = "openhuman-app"
version = "0.64.20"
description = "OpenHuman - AI-powered Super Assistant"
authors = ["OpenHuman"]
edition = "2021"
default-run = "OpenHuman"
autobins = false

# Only the Cargo package was renamed for the crates/ layout. The library and
# executable names below are shipped identities and remain unchanged.

# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

[lib]
# The `_lib` suffix may seem redundant but it is necessary
# to make the lib name unique and wouldn't conflict with the bin name.
# This seems to be only an issue on Windows, see https://github.com/rust-lang/cargo/issues/8519
name = "openhuman"
crate-type = ["staticlib", "cdylib", "rlib"]

[[bin]]
name = "OpenHuman"
path = "src/main.rs"

[build-dependencies]
tauri-build = { version = "2", features = [] }
serde_json = "1"

[dependencies]
# The ONLY openhuman crate this host names (chain: core -> embed -> tinyhumans
# -> rpc -> app/cli/tui; enforced by `scripts/ci/check-crate-chain.mjs`). The
# embedded core, the TinyHumans session owner and transport, and the embed
# facades (`openhuman_rpc::embed`, `openhuman_rpc::tinyhumans`) all come
# through it.
#
# `default-features = false` (set in #1061, before the compile-time domain
# gates existed) means the embedded core does NOT inherit the contributor
# default gate set, so every product gate is forwarded explicitly here, and
# `openhuman-rpc` forwards it down the chain to the core.
#
# This list is NOT optional polish — a gate missing here vanishes from the
# shipped app silently, with no build error and no test failure:
#
# - `voice` — without it the `#[cfg(feature = "voice")]` controllers in
#   `crates/openhuman-core/src/core/all.rs` are never registered, so the whole
#   `openhuman.voice_*` namespace answers "unknown method" at runtime. This
#   shipped broken from v0.58.19 to v0.61.x (#4901); the `VOICE_COMPILED_IN`
#   const assert at the top of `src/lib.rs` now fails the build if it is
#   dropped again.
# - `http-server` — the shell reaches the in-process core only over
#   http://127.0.0.1:<port>/rpc (#5048). Enforced by the
#   HTTP_SERVER_COMPILED_IN compile assert in lib.rs.
# - `scheduler-gate` — without it `require_ac_power` / `battery_floor` are
#   silently unenforced.
# - `file-logging` — the packaged app's only durable log.
# - `hosting` — registration stays credential-gated in tools/ops.rs.
# - `inbound-queues` — Composio triggers and agent webhooks go through the
#   `tinyeventqueues` module (durable, deduplicated, paced); without it a
#   deferred triage is dropped as before.
#
# `scripts/ci/check-feature-forwarding.mjs` fails CI when the product gates
# here drift from `scripts/ci/product-features.txt` (#4919) — do not
# hand-maintain it from memory. The three non-product entries are
# `openhuman-rpc`'s own: `http-client` (the relay client), `server` (the
# embedded JSON-RPC server and `host::desktop`) and `jev` (the Jev-backed
# `tool_search` ranker the product ships).
openhuman-rpc = { path = "../openhuman-rpc", default-features = false, features = [
    "os-keyring",
    "http-client",
    "server",
    "jev",
    "channels",
    "media",
    "inference",
    "voice",
    "web3",
    "documents",
    "modules",
    "security-module",
    "flows",
    "skills",
    "mcp",
    "crash-reporting",
    "http-server",
    "scheduler-gate",
    "file-logging",
    "hosting",
    "inbound-queues",
    "storage-sqlite",
    "storage-file",
    "secret-file",
    "legacy-import",
] }
# The widget scheme reduces CSP origins with `tinymcp_bus::ui`'s pure rules.
# The contract, not the module crate: hosts reach modules through `*-bus`.
tinymcp-bus = { path = "../../vendor/tinymcp/crates/tinymcp-bus" }
# Tauri core and plugins. Use upstream Tauri's native WebView runtime (Wry),
# rather than the removed Chromium/CEF fork.
tauri = { version = "2.11", default-features = false, features = [
    "wry",
    "common-controls-v6",
    "devtools",
    "macos-private-api",
    "tray-icon",
    "unstable",
    "webview-data-url",
] }
tauri-plugin-deep-link = "2.0.0"
tauri-plugin-notification = "2"
tauri-plugin-opener = "2"
# Prevents a second launch from racing into CEF init and hitting the
# `cef::initialize(...) != 1` cache-lock panic seen in production
# (Sentry OPENHUMAN-TAURI-A). The plugin acquires a per-identifier
# lock before any tauri::Builder work happens, so the secondary
# process exits cleanly after handing its argv to the primary. The `deep-link`
# feature forwards second-launch deep-link payloads to the primary instance on
# Windows/Linux, which is required for hot-instance OAuth callbacks.
tauri-plugin-single-instance = { version = "2", features = ["deep-link"] }
# Auto-update for the Tauri shell itself. The core sidecar already has its own
# updater (see `core_update.rs`); this plugin handles the .app/.exe/.AppImage
# bundle. Both are needed because shipping a new RPC method requires both
# pieces in lockstep, and on macOS the .app bundle is what carries TCC grants.
tauri-plugin-updater = "2"
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"
directories = "5"
tokio = { version = "1", features = ["rt-multi-thread", "process", "sync", "time", "net"] }
tokio-util = { version = "0.7", features = ["rt"] }
url = "2"

reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
rand = "0.9"
hex = "0.4"
# Tauri's vendored dev-server proxy (see `vendor/tauri-cef/.../protocol/tauri.rs`)
# builds a reqwest 0.13 client that requires a process-wide rustls
# `CryptoProvider`. Without one, `ClientBuilder::build()` panics with
# "No provider set" the first time `tauri dev` proxies a request. We install
# the ring provider at startup in `lib.rs::run()`.
rustls = { version = "0.23", default-features = false, features = ["ring"] }
log = "0.4"

# Native directory chooser for the folder memory-source (#5831). A directory
# picked in the renderer carries no filesystem path — `File.path` is an
# Electron extension that neither Wry's WKWebView/WebView2/WebKitGTK nor
# plain Chromium implements — so the only way to learn where a chosen folder
# lives is to ask the OS from the host process.
#
# `default-features = false` is what makes this a different proposition from
# the `rfd` that `artifact_commands` shed in #5541. That removal counted 13
# packages: `ashpd`, `zbus`, and the `async-io`/`polling` executor stack.
# Every one of those arrives through `rfd`'s **default** `xdg-portal` feature
# (`xdg-portal = ["ashpd", "urlencoding", "pollster"]`), which is not enabled
# here. `gtk3` binds the GTK that Wry already links on Linux instead —
# `gtk-sys` is in that graph via `tray-icon` -> `tauri` whether or not this
# entry exists — and on macOS/Windows `rfd` compiles against `objc2-app-kit`
# / `windows-sys`, both already present. The marginal cost is `rfd` itself.
#
# `Cargo.lock` will nonetheless gain `ashpd` and a wayland cluster, and that
# is expected: the lockfile records the **maximal** resolution graph,
# including optional and target-gated edges nothing enables. Read the real
# graph, not the lock —
#
#     cargo tree --target x86_64-unknown-linux-gnu -e normal -i ashpd
#     # -> warning: nothing to print.
#
# Prefer this over `tauri-plugin-dialog`: that plugin depends on the same
# `rfd` AND drags `tauri-plugin-fs` in behind it, for one command that needs
# no filesystem permission surface at all.
#
# The feature list is `tauri-plugin-dialog`'s own, verbatim — that plugin is
# the reference integration of `rfd` into a Tauri app, and each of the three
# matters here. `gtk3` is the right Linux backend precisely *because* the host
# is GTK-based (rfd steers non-GTK apps to the portal instead), `tokio` drives
# the async dialog on the runtime a `#[tauri::command]` already runs on, and
# `common-controls-v6` mirrors the feature `tauri` itself enables above, so
# the Windows dialog matches the rest of the app's chrome.
rfd = { version = "0.15", default-features = false, features = [
    "gtk3",
    "tokio",
    "common-controls-v6",
] }

# Sentry for the Tauri shell (desktop host) process — separate Sentry project
# from the React frontend and the Rust core sidecar. DSN is baked at compile
# time via `option_env!("OPENHUMAN_TAURI_SENTRY_DSN")` in `lib.rs::run()` and
# can be overridden at runtime via the same env var. Feature set mirrors the
# core sidecar (`Cargo.toml` at repo root) minus `tracing`.
sentry = { version = "0.47.0", default-features = false, features = ["backtrace", "contexts", "panic", "debug-images", "httpdate"] }

# Used by the imessage_scanner module.
anyhow = "1.0"
# SQLite for the macOS iMessage scanner, which reads ~/Library/Messages/chat.db
# read-only. Declared in the general table rather than under the macOS target so
# `cargo check` on Linux/Windows resolves the same graph. Pinned to match the
# core crate so a single bundled SQLite is linked.
rusqlite = { version = "=0.40.2", features = ["bundled"] }
parking_lot = "0.12"
chrono = "0.4"
async-trait = "0.1"
# NOTE (#5541): `resvg` + `tiny-skia` were removed here. They existed only for
# the mascot fake-camera pipeline, which rasterized the mascot SVG to a Y4M
# frame for CEF's `--use-file-for-fake-video-capture` flag. That whole path
# (`meet_call`, `fake_camera`) was deleted in #5478 when the app moved off CEF
# to Wry, but the two dependencies stayed behind — `cargo machete` found zero
# references to either crate anywhere in `crates/openhuman-app/src/`.
#
# They were not cheap to leave: the pair carried the entire SVG rasterisation
# stack, and dropping them takes the shipped app from 511 to 481 unique
# crates — `usvg`, `fontdb`, `rustybuzz`, `ttf-parser`, `roxmltree`, `kurbo`,
# `svgtypes`, `simplecss` and the unicode-bidi/script/ccc/vo tail, 30 crates
# in total. If mascot SVG rasterisation ever comes back, re-add them here
# rather than reaching for a heavier image stack.

[target.'cfg(unix)'.dependencies]
nix = { version = "0.29", default-features = false, features = ["hostname", "signal", "socket", "user"] }

[target.'cfg(target_os = "macos")'.dependencies]
objc2 = "0.6"
objc2-app-kit = "0.3.2"
# iMessage scanner reads ~/Library/Messages/chat.db read-only on macOS
# (rusqlite is declared once in the general [dependencies] table above).
objc2-user-notifications = "0.3.2"
block2 = "0.6.2"
objc2-foundation = { version = "0.3.2", features = ["NSTimer", "block2"] }
# Native WKWebView host for the floating mascot window — bypasses CEF
# (which can't render transparent windowed-mode browsers).
objc2-web-kit = { version = "0.3.2", features = ["block2"] }

[target.'cfg(target_os = "windows")'.dependencies]
# AttachConsole — re-attach to the parent shell when the binary runs as a CLI
# (the `core` subcommand). The main binary itself is windows-subsystem so
# launching the Tauri app from Explorer does not pop a console; the helper
# CEF subprocess re-execs inherit that same subsystem.
windows-sys = { version = "0.59", features = [
    "Win32_System_Console",
    "Win32_Foundation",
    # EnumWindows / ShowWindow / SW_HIDE / SW_SHOW used by the main-window
    # close handler. tauri-runtime-cef's window.hide() / minimize() target a
    # cef::Window internal handle, not the visible Chrome_WidgetWin_1
    # top-level frame, so we walk the OS window list ourselves (#1607).
    "Win32_UI_WindowsAndMessaging",
    # CreateMutexW / CloseHandle — used by the pre-CEF single-instance guard
    # (see run() in lib.rs) that detects a second launch before CefRuntime::init
    # fires (Sentry OPENHUMAN-TAURI-A).
    # Win32_Security is required because CreateMutexW's SECURITY_ATTRIBUTES
    # parameter is gated behind it in windows-sys 0.59.
    "Win32_System_Threading",
    "Win32_Security",
    # CreateToolhelp32Snapshot / Process32FirstW / Process32NextW — used by the
    # pre-CEF cache-lock wait (cef_singleton_wait.rs) that counts straggler
    # processes from a dying prior instance before cef::initialize (TAURI-RUST-F).
    "Win32_System_Diagnostics_ToolHelp",
    "Win32_Storage_FileSystem",
    "Win32_System_IO",
    "Win32_System_Pipes",
    # RegOpenKeyExW / RegQueryValueExW / RegCloseKey — used by
    # deep_link_registration_check::verify_protocol_registration to read
    # back HKCU\Software\Classes\openhuman\shell\open\command after
    # `tauri-plugin-deep-link::register_all` so a silently-failed write
    # surfaces in the Sentry / user logs (issue #2699).
    "Win32_System_Registry",
] }

[features]
default = ["gateways"]
# Routing the frontend to a core somewhere other than this process: a
# container, a machine over SSH, or a container on a machine over SSH. Calls
# the TinyBox module through openhuman-rpc's curated embed facade.
#
# This is a **shell-local** gate, unrelated to the feature-forwarding rules in
# AGENTS.md: those govern which product gates the shell forwards on its
# `openhuman-rpc` dependency, and `scripts/ci/check-feature-forwarding.mjs`
# reads that dependency's feature list, not this table. Nothing here belongs in `scripts/ci/product-features.txt`.
gateways = []
# `custom-protocol` switches Tauri from `devUrl` (vite dev server) to the
# bundled `frontendDist` served via `tauri://localhost`. `cargo tauri build`
# turns this on automatically for release; do not put it in `default` or
# every `pnpm dev:app` will silently load the production bundle. DO NOT REMOVE!!
custom-protocol = ["tauri/custom-protocol"]
storage-mongodb = ["openhuman-rpc/storage-mongodb"]
storage-s3 = ["openhuman-rpc/storage-s3"]
storage-rabbitmq = ["openhuman-rpc/storage-rabbitmq"]
# Forwarded down the chain (rpc -> tinyhumans -> embed -> core) to expose
# `openhuman.test_reset`. Off by default; the E2E build flips it on via
# `cargo tauri build --features e2e-test-support`. See app/scripts/e2e-build.sh.
e2e-test-support = ["openhuman-rpc/e2e-test-support"]

[patch."https://github.com/tinyhumansai/tinytools"]
# tinymcp's `tools` feature names tinytools by git rev so it can be built on its
# own. Redirect it to the copy tinyagents vendors — the one the harness and
# every host tool link — so there is exactly one `tinytools` package and one
# `Tool` trait. Without this, MCP tools would not satisfy the harness's trait.
tinytools = { path = "../../vendor/tinyagents/vendor/tinytools/crates/tinytools" }
tinytools-agent = { path = "../../vendor/tinyagents/vendor/tinytools/crates/tinytools-agent" }

[patch."https://github.com/tinyhumansai/tinyinference"]
# Crates in this world name tinyinference by git rev; without this the shell
# world resolves TWO copies of the same types. Mirrors the root Cargo.toml.
tinyinference-core = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-core" }
tinyinference-embeddings = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-embeddings" }
tinyinference-llm = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-llm" }
tinyinference-local = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-local" }
tinyinference-voice = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-voice" }

[patch."https://github.com/tinyhumansai/tinybus"]
# tinystoragedrivers-bus names tinybus by git rev. Redirect it to the in-tree
# copy so the graph holds exactly one `tinybus` (one `Interface`, one
# `Connection`) instead of a second one compiled only for the storage wire types.
tinybus = { path = "../../vendor/tinybus/crates/tinybus" }
tinybus-macros = { path = "../../vendor/tinybus/crates/tinybus-macros" }
tinybus-module = { path = "../../vendor/tinybus/crates/tinybus-module" }

[patch."https://github.com/senamakel/tinybus"]
# The fork-pinned storage packages use this source identity; keep their bus
# types unified with the host's vendored checkout.
tinybus = { path = "../../vendor/tinybus/crates/tinybus" }
tinybus-macros = { path = "../../vendor/tinybus/crates/tinybus-macros" }
tinybus-module = { path = "../../vendor/tinybus/crates/tinybus-module" }

[patch."https://github.com/tinyhumansai/tinystoragedrivers"]
# One editable checkout every module resolves onto: each vendor/tiny* manifest
# names tinystoragedrivers by git tag, and this redirects them all to
# vendor/tinystoragedrivers. This reverses #7754's removal of the patch on
# purpose. The vendored commit must stay semver-compatible with the tag modules
# declare; scripts/ci/check-storage-owner.mjs enforces that every tsd package
# resolves to a path under vendor/tinystoragedrivers/. tinystoragedrivers-tinybus
# is left out: nothing here depends on it, and an unused patch warns. Add it with
# the first dependent. The app world does not link the mongodb or s3 drivers, so
# those are omitted here too (the root patch carries them).
tinystoragedrivers = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers" }
tinystoragedrivers-api = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-api" }
tinystoragedrivers-blob = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-blob" }
tinystoragedrivers-bus = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-bus" }
tinystoragedrivers-busproxy = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-busproxy" }
tinystoragedrivers-connect = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-connect" }
tinystoragedrivers-document = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-document" }
tinystoragedrivers-kv = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-kv" }
tinystoragedrivers-queue = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-queue" }
tinystoragedrivers-secrets = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-secrets" }
tinystoragedrivers-testkit = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-testkit" }
tinystoragedrivers-types = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-types" }

[patch."https://github.com/senamakel/tinystoragedrivers"]
# Fork-pinned modules such as TinyWallet use this source identity; resolve it
# to the same vendored checkout as the canonical Git URL above.
tinystoragedrivers = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers" }
tinystoragedrivers-api = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-api" }
tinystoragedrivers-blob = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-blob" }
tinystoragedrivers-bus = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-bus" }
tinystoragedrivers-busproxy = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-busproxy" }
tinystoragedrivers-connect = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-connect" }
tinystoragedrivers-document = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-document" }
tinystoragedrivers-kv = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-kv" }
tinystoragedrivers-queue = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-queue" }
tinystoragedrivers-secrets = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-secrets" }
tinystoragedrivers-testkit = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-testkit" }
tinystoragedrivers-types = { path = "../../vendor/tinystoragedrivers/crates/tinystoragedrivers-types" }

[patch.crates-io]
# Keep reqwest defaults disabled in this independent Cargo world too. Without
# this patch, the registry release reintroduces native-tls/OpenSSL on Linux.
# TinyAgents vendored submodule (repo-root vendor/tinyagents, pinned at the
# released tag) — same patch as the root Cargo world so both resolve the
# in-tree SDK source. `git submodule update --init vendor/tinyagents` first.
# tinyagents is a workspace now — no patch entry (mirrors root Cargo.toml)
# TinyTools rides in through tinyagents' own vendored checkout. The path must
# match the one the core crate names, or cargo resolves two distinct packages
# and the shell's `dyn Tool` stops being the core's. See the core manifest.
tinytools = { path = "../../vendor/tinyagents/vendor/tinytools/crates/tinytools" }
# TinyMemory declares the focused TinyInference crates by version
# (crates-io-shaped, unpublished), so this world must patch them exactly as
# the root manifest does.
tinyinference-core = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-core" }
tinyinference-embeddings = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-embeddings" }
tinyinference-llm = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-llm" }
tinyinference-local = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-local" }
tinyinference-voice = { path = "../../vendor/tinyagents/vendor/tinyinference/crates/tinyinference-voice" }
[dev-dependencies]
# `test-util` enables `#[tokio::test(start_paused = true)]` for the
# idle-watchdog unit tests in `cdp/session.rs` (#1213).
tokio = { version = "1", features = ["macros", "rt", "test-util"] }
tempfile = "3"

# Emit just enough DWARF in release builds for Sentry to symbolicate Rust
# panics + render surrounding source lines. `line-tables-only` keeps the
# binary small (only file+line tables, no full type info) while still
# letting `sentry-cli debug-files upload --include-sources` produce a
# usable `.src.zip`. `split-debuginfo = "packed"` writes the debug data
# into a separate `.dSYM` bundle on macOS so the shipped executable
# itself stays slim.
[profile.release]
debug = "line-tables-only"
split-debuginfo = "packed"
# Binary-size settings (#5541) — kept in sync with the root `Cargo.toml`,
# which carries the full rationale and the measurements. The short version:
# the shell statically embeds the whole core crate, so it pays the same ~120k
# monomorphized methods, and the same three settings apply. `strip` is safe
# because Sentry symbolicates server-side from the separate dSYM/PDB/DWP that
# `scripts/upload_sentry_symbols.sh` uploads, matched by a debug ID that
# `strip` preserves; a build that lost its debug files fails that script
# loudly (#1403) rather than shipping un-symbolicated.
#
# These are separate Cargo worlds (each its own `Cargo.lock`/`target/`) — a
# change here needs the same change in the root `Cargo.toml` and in
# `app/src-tauri-mobile/Cargo.toml` (the iOS/Android host).
lto = "thin"
# 16, not 1 — see the root `Cargo.toml` for why (#5595: one codegen unit cost
# the desktop release matrix +82% build time and blocked every release).
codegen-units = 16
strip = "symbols"

# Fast CI builds: trade runtime perf for compile speed
[profile.ci]
inherits = "release"
opt-level = 1
codegen-units = 16
lto = false
incremental = false
strip = true
debug = false

# Faster local + CI iteration (#3877): compile third-party dependencies in the
# dev/test profiles WITHOUT debuginfo. The Tauri shell embeds the full core
# crate, so its dev dependency graph is huge (a local checkout showed
# `crates/openhuman-app/target/` ~4.4G) and DWARF generation + linking for every
# dependency dominates `cargo build` / `cargo tauri dev` / `cargo llvm-cov`.
#
# Scope is intentionally narrow and low-risk (kept in sync with the root
# crate's `Cargo.toml` so both Cargo worlds get the same discipline):
#   * `package."*"` targets dependencies only — the shell + core crates keep
#     full debuginfo, so panics/backtraces still resolve to file:line.
#   * Only the unoptimised `dev`/`test` profiles change; `release`/`ci` are
#     untouched, so shipped bundles and Sentry symbolication are unaffected.
#   * No artifact paths, features, or runtime behaviour change.
[profile.dev.package."*"]
debug = false

# Module admission hashes the host executable (tinybus `attach_linked`), once
# per process. nextest runs every test in its own process, so an unoptimised
# SHA-256 over a ~500 MB test binary cost ~10 s per module-backed test. Keep
# in sync with the other workspace manifest.
[profile.dev.package.sha2]
opt-level = 3