[package]
name = "server"
version = "0.1.0"
edition = "2024"
license = "AGPL-3.0-or-later"

[[bin]]
name = "dovenest"
path = "src/main.rs"

[dependencies]
api-types = { path = "../api-types" }
pimdav = { path = "../pimdav" }
anyhow = "1"
# Global allocator, for C code too. glibc keeps freed memory after a burst of
# large answers, musl's allocator (the static release) is slow, and mimalloc
# kept hundreds of MB after load. Needs `make` to build.
tikv-jemallocator = { version = "0.6", features = ["unprefixed_malloc_on_supported_platforms", "background_threads"] }
argon2 = "0.6"
axum = "0.8"
bytes = "1"
chrono = { version = "0.4", features = ["serde"] }
clap = { version = "4", features = ["derive", "env"] }
# WebDAV protocol only. The bundled `localfs`/`memfs` backends are off: the
# dav filesystem is `api::dav`, which goes through `crate::fs` so that root
# containment, read-only roots and share scoping apply to a mount too.
dav-server = { version = "0.11", default-features = false }
# Thumbnails: decode only what the grid can show. The default feature set
# also pulls in rav1e and exr, which are large and unused here.
image = { version = "0.25", default-features = false, features = [
    "jpeg",
    "png",
    "gif",
    "webp",
    "bmp",
    "tiff",
] }
# Lanczos3 downscaling. `image`'s own is 15x slower at the same quality.
fast_image_resize = { version = "6", features = ["image"] }
# libwebp for the encoder. The crate vendors the C source and builds it with
# `cc`; no system library, same as the bundled SQLite.
webp = "0.3"
# `default-features = false` drops the `cfb` dependency (compound-document
# detection we do not need) and makes this a zero-dependency crate.
infer = { version = "0.22", default-features = false, features = ["alloc"] }
mime_guess = "2"
# CalDAV hrefs. Already in the tree via `url`.
percent-encoding = "2"
multer = "3"
rusqlite = { version = "0.40", features = ["bundled"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
sha2 = "0.11"
tokio = { version = "1", features = [
    "rt-multi-thread",
    "macros",
    "fs",
    "io-util",
    "sync",
    "time",
    "signal",
    "process",
] }
tar = "0.4"
flate2 = "1"
zstd = "0.14"
# Deflate only; the defaults add AES, bzip2, lzma, ppmd, zopfli.
zip = { version = "9.0.0-pre3", default-features = false, features = ["deflate-flate2-zlib-rs"] }
tower-http = { version = "0.7", features = ["trace", "set-header", "fs"] }
# Named in the `DavLockSystem` impl. dav-server does not re-export it, so the
# version has to track dav-server's own.
xmltree = "0.12"
futures-util = "0.3"
# Typed `Authorization: Basic` parsing. Already in the tree via dav-server.
headers = "0.4"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
ignore = "0.4"
grep = "0.4"
webauthn-rs = { version = "0.5.5", features = ["conditional-ui"], default-features = false }
getrandom = "0.4"
# For `ResidentKeyRequirement`, which `webauthn-rs` uses
# internally but does not re-export. Keep this version equal to webauthn-rs'
# own: it already pulls this crate in, and two different versions would compile
# while being different types.
webauthn-rs-proto = "0.5.5"

[dev-dependencies]
tempfile = "3"
tower = { version = "0.5", features = ["util"] }

[dependencies.rust-embed]
version = "8"
optional = true

[features]
# Embed the frontend (built into server/dist by `just build`).
# Without this feature the server reads the frontend from disk at runtime
# (Trunk's output directory, or $DOVENEST_DIST), which is the dev flow.
embedded = ["dep:rust-embed"]