Continuum is intended to be sold, so every dependency has to permit distribution in closed-source commercial software. This crate carried `license = "UNLICENSED"`, which is not valid SPDX and made `cargo deny` fail outright; `LicenseRef-Proprietary` with `publish = false` is what marks it first-party instead. The note in deny.toml matters more than the allow list here: the ONNX model weights this worker will load are licensed independently of the `ort` crate, and `cargo deny` cannot see them at all. Ultralytics YOLO and Obico's print-failure model are both AGPL-3.0 and cannot ship in a commercial product - see continuum-common's docs/LICENSES.md, and pick a permissive architecture before collecting training data rather than retraining because of a licence.
28 lines
953 B
TOML
28 lines
953 B
TOML
[package]
|
|
name = "continuum-ai-worker"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "Continuum AI worker - consumes camera frame batches from Redis Streams and runs print-failure detection"
|
|
# Proprietary: deliberately not an SPDX id, so cargo-deny treats it as
|
|
# first-party. See docs/LICENSES.md in continuum-common.
|
|
license = "LicenseRef-Proprietary"
|
|
publish = false
|
|
|
|
[[bin]]
|
|
name = "continuum-ai-worker"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
tokio = { version = "1.40", features = ["full"] }
|
|
redis = { version = "0.27", features = ["tokio-comp", "streams"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
|
|
anyhow = "1"
|
|
dotenvy = "0.15"
|
|
|
|
# Real inference (ONNX Runtime via the `ort` crate) and the Postgres audit
|
|
# write (via `sqlx`) go here once src/inference and src/reporter grow past
|
|
# their stubs - see those modules' doc comments.
|