Files
zclaw_openfang/desktop/src-tauri/Cargo.toml
iven edd6dd5fc8
Some checks failed
CI / Lint & TypeCheck (push) Has been cancelled
CI / Unit Tests (push) Has been cancelled
CI / Build Frontend (push) Has been cancelled
CI / Rust Check (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
fix(audit): Batch 4-6 中间件注释 + 依赖迁移 + 安全加固
Batch 4:
- kernel/mod.rs: 添加中间件注册顺序≠执行顺序注释
- EvolutionMiddleware 注册处标注 priority=78

Batch 5:
- desktop/src-tauri/Cargo.toml: serde_yaml 0.9 (deprecated) → serde_yaml_bw 2.x

Batch 6:
- saas/main.rs: CORS 开发模式改为显式 localhost origins (修复 Any+credentials 违规)
- docker-compose.yml: 移除默认弱密码 your_secure_password,改为必填校验
- director.rs: 用户输入添加 <user_input>/<user_request> 边界标记防注入

全量测试通过: 719 passed, 0 failed
2026-04-19 08:46:12 +08:00

86 lines
2.2 KiB
TOML

[package]
name = "desktop"
version.workspace = true
edition.workspace = true
description = "ZCLAW Desktop Application"
authors = ["ZCLAW Team"]
license.workspace = true
repository.workspace = true
rust-version.workspace = true
[lib]
name = "desktop_lib"
crate-type = ["staticlib", "cdylib", "rlib"]
[build-dependencies]
tauri-build = { version = "2", features = [] }
[features]
default = []
dev-server = ["dep:axum", "dep:tower-http"]
[dependencies]
# ZCLAW crates
zclaw-types = { workspace = true }
zclaw-memory = { workspace = true }
zclaw-runtime = { workspace = true }
zclaw-kernel = { workspace = true }
zclaw-skills = { workspace = true }
zclaw-hands = { workspace = true }
zclaw-pipeline = { workspace = true }
zclaw-growth = { workspace = true }
zclaw-protocols = { workspace = true }
# Tauri
tauri = { version = "2", features = [] }
tauri-plugin-opener = "2"
tauri-plugin-updater = "2"
# MCP debug plugin (dev-only, allows AI agents to interact with the app)
tauri-plugin-mcp = { git = "https://github.com/P3GLEG/tauri-plugin-mcp" }
# Async runtime
tokio = { workspace = true }
futures = { workspace = true }
async-trait = { workspace = true }
# Serialization
serde = { workspace = true }
serde_json = { workspace = true }
serde_yaml = { package = "serde_yaml_bw", version = "2" }
toml = "0.8"
# HTTP client
reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls", "blocking"] }
# Utilities
chrono = { workspace = true }
regex = { workspace = true }
dirs = { workspace = true }
thiserror = { workspace = true }
dashmap = { workspace = true }
uuid = { workspace = true }
base64 = { workspace = true }
tracing = { workspace = true }
tracing-subscriber = { workspace = true }
secrecy = { workspace = true }
# Browser automation (existing)
fantoccini = "0.21"
# Secure storage (OS keyring/keychain)
keyring = "3"
# Encryption
aes-gcm = { workspace = true }
sha2 = { workspace = true }
rand = { workspace = true }
# SQLite (keep for backward compatibility during migration)
sqlx = { workspace = true }
libsqlite3-sys = { workspace = true }
# Development server (optional, only for debug builds)
axum = { version = "0.7", optional = true }
tower-http = { version = "0.5", features = ["cors"], optional = true }