This repo contains libraries used by the various Craft Apps. It's a Rust monorepo workspace, and the libraries can be included by any Craft Apps that need them.

In the future this may grow to include non-Rust library code.

If any libraries grow beyond Craft App usage, eg. RAW format support, they may be promoted out and into their own libraries for the broader ecosystem to take advantage of.

Layout

A Cargo workspace (edition 2024, resolver 3). Each library is a crate under crates/<name>, named craft-<name>, with version, edition, license and repository inherited from the workspace (license.workspace = true, and so on) and [lints] workspace = true. Register each crate in [workspace.dependencies] in the root Cargo.toml.

Apps depend on a crate by git:

craft-<name> = { git = "https://github.com/storytold/craft-libs", rev = "<commit>" }

Libraries

craft-platform: optional native dialog lifecycle, Linux/BSD desktop appearance observation and browser download ownership; application policy stays in the apps.
craft-aep: After Effects projects: the .aep (RIFX) and .aepx container as a lossless chunk tree that writes back byte for byte, and a typed, read-only view of compositions, layers, properties, keyframes, effects, masks, shapes, text and footage. Clean room, from EffectCraft. Mapping onto an app's document stays in the app.
craft-ai-core: the data model and contract for AI in the Craft Apps (connections, models, tools, requests, jobs, consent, history, route spec). Pure, no I/O, wasm-safe. Contract in docs/ai-shared-layer.md.
craft-pdf: independently optional PDF parsing, interpretation, rasterization and guarded authoring. Apps retain layout, fonts, editing and export policy; writer-only consumers do not enable the shared reader.
craft-pdn: Paint.NET documents (.pdn, PDN3), read: the layer list, blend modes and chunked gzip pixel blocks, with a data-only MS-NRBF (.NET binary serialization) reader. From PhotoCraft.
craft-aaf: clean-room AAF (Edit Protocol, structured storage) and OMF Interchange 2.0 (Bento) readers and writers over one mob-style composition model with exact times, clip gain, markers, nested compositions and embedded PCM essence. From FilmCraft.
craft-assuan: the Assuan protocol and gpg-agent's operations (key lookup, signing a digest, decrypting a session key) over any Read + Write stream, with a bounded canonical S-expression reader. No sockets; everything the agent sends is capped.
craft-affinity: bounded reader for native Affinity documents (.af, .afdesign, .afphoto, .afpub): archive, object stream and a neutral document model with layers, artboards, vectors, text, tables, images and masks. Read only; mapping onto an app's document stays in the app.
craft-atomic: Crash-safe atomic file writing and replacement with same-directory staging, directory fsync, Apple F_FULLFSYNC fallback, transient lock backoff, and fault injection for the Craft suite.
craft-captions: caption and subtitle files behind one neutral model (cues with exact tick times): SubRip, WebVTT, Scenarist SCC, MacCaption MCC, EBU STL and TTML / IMSC1 / DFXP readers and writers, and CEA-608 / CEA-708 byte-pair coding. Carved from FilmCraft.
craft-cfb: clean-room Compound File Binary ([MS-CFB], OLE structured storage) reader and writer: the container of legacy Office files, Outlook messages, encrypted OOXML packages and AAF. Bounded on hostile input; what the streams hold stays with each format.
craft-cms: pure-Rust ICC v2/v4 colour management: profile parsing and writing, transforms, rendering intents, black point compensation, soft proofing, gamut checks, 3D LUTs and built-in profiles (sRGB, Display P3, synthetic coated CMYK and others).
craft-crs: Adobe Camera Raw settings (the crs: namespace of an XMP packet or .xmp sidecar, read through craft-metadata): the settings by name, numbers, tone curve points, local corrections and the crop, read and written. From PhotoCraft.
craft-codepage: legacy 8-bit code pages, one table each: the single-byte Windows pages, Mac OS Roman and fifteen DOS pages, keyed by Windows code page number, with the RTF/Word font charsets. craft-rtf, craft-dxf and craft-mime decode through it.
craft-crw: clean-room Canon CRW (CIFF) raw decoder, from LightCraft: the heap container, the entropy coding derived by black-box analysis (frozen code tables), sensor black and white levels and as-shot white balance. The complete derivation record (plan, sources log, scripts, verification) is in crates/crw/clean-room/. Colour stays in each app.
craft-csv: delimited text (CSV, TSV) and SYLK: encoding detection (UTF-8, UTF-16, Windows-1252 or Windows-1256), delimiter sniffing, a record parser with a cap on fields per record, field quoting for writers, and a SYLK (.slk) reader with R1C1 formulas rewritten to A1.
craft-dialogs: native file and message dialogs that never block the event loop: queued requests shown at the end of the frame and answered on a later frame, free-standing Open and Folder panels and Save sheets on macOS, case-insensitive filters. What to do with the answer stays in each app.
craft-doc: reads PhotoCraft .pcraft, VectorCraft .vectorcraft and EffectCraft .ecproj documents without the apps: the kind and version, the previews and PDF they carry, and their pages and layers. Rendering and editing stay in each app.
craft-docpath: decides whether a path or file: URL stored in a document may be opened. Paths stored in documents are followed only when they are local or on the document's own network share; other network paths, device paths and non-file URLs are refused.
craft-dpx: DPX (SMPTE ST 268) and Kodak Cineon frames, from PhotoCraft, FilmCraft and EffectCraft: header fields and code values at 8, 10, 12 and 16 bits in both byte orders, filled and packed, RGB, RGBA, ABGR, luma and Y'CbCr descriptors, and a writer for both formats. Bounded on hostile input. Colour conversion and orientation stay in each app.
craft-drawingml: the DrawingML that PPTX, DOCX and XLSX share: EMU units and a:xfrm, colours with theme slots and colour transforms, preset shape outlines (a:prstGeom), custom geometry with guide formulas (a:custGeom) and preset text warps (a:prstTxWarp). From DeckCraft. Takes craft-xml trees; packages stay with each format.
craft-eps: Encapsulated PostScript files as a container: the binary preview header (read and write), the DSC header comments and bounding boxes (also (atend)), the EPSI preview bitmap, ASCII85 data, and telling EPS, PostScript and Illustrator files (PostScript- or PDF-based) apart. No PostScript interpreter.
craft-dxf: DXF tag reader and writer, from CADCraft: ASCII and binary DXF as (group code, value) tags, split into sections and entities, with pre-2007 code pages and version detection, and written back; and model, the drawing above the tags (header variables, tables, blocks, layouts, entities) and its writer (R12 to 2018), merged from CADCraft's and VectorCraft's readers. Bounded on hostile input. Mapping the model onto a document stays in each app.
craft-ecproj-format: the envelope of EffectCraft .ecproj project files: savedBy, the schema version and its check, and the file object with the project and its saved view as type parameters. The project model stays in EffectCraft.
craft-fig: clean-room reader and writer for the .fig container (Figma Design and FigJam local copies): the ZIP archive, the chunked canvas with its kiwi schema and message, images, and the vector network and geometry blobs. Bounded on hostile input. Carved from FigCraft.
craft-epub: EPUB packages: the OCF ZIP container, the package document (metadata, manifest, spine) and the navigation document, written as EPUB 3 (reflowable and fixed layout) and read (EPUB 2 and 3) with bounded entry sizes. Content documents are the caller's.
craft-figma-rest: typed model of the Figma REST API file JSON (document tree, paints, effects, text styles, layout, component metadata), read and written with serde without losing fields it has no name for. The neutral model the .fig and .sketch readers map onto, with their extensions documented.
craft-ews: the SOAP layer of Exchange Web Services, from MailCraft, without sockets: the request envelope and an escaping element builder, and the answer envelope, faults and response messages with their codes, read with craft-xml. The operations and everything over HTTP stay in each app.
craft-exr: OpenEXR pieces shared by PhotoCraft and EffectCraft: layer and channel names, the channels that make a colour picture, and Cryptomatte IDs, metadata keys, manifests and rank channels. The optional decode feature adds bounded part listing, flat decoding (scan lines, tiles, every compression of the exr crate) and writing.
craft-font-catalog: the installed fonts on every platform (font folders, fontconfig and Flatpak host folders, CoreText, DirectWrite, the font store), lookup by family, style, localized, legacy, full and PostScript names, family loads shared between threads, and rescans when fonts are installed or removed.
craft-font-manager: Craft Font Manager as a library: search and filters over the Google Fonts index, installed fonts by family, the font store interface, and (egui feature) FontsPanel, the whole interface as one panel for the launcher's Fonts tab and the standalone app.
craft-font-store: the suite's font store: the pinned Google Fonts and Noto indexes plus indexes the user adds (never curated), exact lookup by family and style or PostScript name, and installs from each source's URLs (jsDelivr, then raw GitHub) checked by size, sha256 and parsing, with the licence, a manifest, and removal. Off until the user turns downloading on; agents can't.
craft-fonts-build: embeds the optional craft-fonts faces from an app's build.rs (CRAFT_FONTS_DIR, CRAFT_FONTS_REQUIRED, script filters) as a table of EmbeddedFaces. No dependencies; the app picks the faces.
craft-gainmap: HDR gain maps, from LightCraft: the ISO 21496-1 metadata and Adobe hdrgm XMP (read and write), measuring a gain map from SDR and HDR renditions, applying one, and Apple's legacy maps. Encoding and the container stay in each app.
craft-gcode: Grbl-style G-code writer: polylines in millimetres to G0/G1 moves with laser power and feed, for cutting lasers and plotters, as a commented file or as bare lines for streaming. Its grbl module has the real-time command bytes and the status and acknowledgement parsers.
craft-gif: GIF block reader, from PhotoCraft: the logical screen, every frame's position, delay, disposal and transparent colour, the loop count and the first frame's colour table, without decompressing pixels. Tells an animation from a still and whether a file can hold the picture it declares before a decoder runs.
craft-hdr: Radiance HDR (RGBE) picture reader, from FilmCraft: flat, old and new run-length scan lines and all eight axis orders, to linear float RGB. Scan lines are validated before the picture is allocated.
craft-heif: optional HEIF/HEIC still-image decoder, from LightCraft: heic-rs reads the container and HEVC pictures, and this crate converts to 16-bit RGB to match libheif (VUI range and matrix, chroma upsampling, imir, ICC on grid tiles). Also orientation, alpha, EXIF/XMP and thumbnails. It never panics, and apps put it behind a non-default feature.
craft-html: the bottom layer of reading and writing HTML: a tolerant tokenizer (text, start tags, end tags; elements to drop or to read as raw text are options), character references with the legacy names browsers accept without ;, escaping, and the character set a page declares. No tree, no CSS, no rendering.
craft-i18n: translations over the embedded craft-i18n catalogs: lookup with fallback (pt-br → pt → English), plurals, language names, the system locale and a pseudo locale. The catalogs stay a fully optional build input; apps keep tl! and their language setting.
craft-raw: camera raw files, the file-format layer, from LightCraft with what PhotoCraft's and FilmCraft's readers added: container parsing and decompression to a neutral raw image (samples, CFA, black and white levels, active area, crop, orientation, colour tags, opcode lists, embedded previews), one Cargo feature per format. DNG reading and writing, Hasselblad 3FR/FFF, Minolta MRW, Epson ERF, Mamiya MEF, Kodak DCS, Pentax PEF, Samsung SRW, Canon CR2, Nikon NEF/NRW, Panasonic RW2 and Canon CRW (through Hasselblad 3FR/FFF, Minolta MRW, Epson ERF, Mamiya MEF, Kodak DCS, Pentax PEF, Samsung SRW, Canon CR2, Nikon NEF/NRW and Canon CRW (through craft-crw) so far; demosaicing and everything after stay with the develop pipeline.
craft-tga: Truevision Targa, from FilmCraft (reader) and PhotoCraft (writer): true-colour, grayscale and colour-mapped pictures, raw or run-length encoded, any origin, to RGBA8, and a run-length writer whose packets end with their scan line. Bounded on hostile input.
craft-idml: IDML (InDesign Markup Language) packages: the ZIP container read with bounded part sizes and lenient part names, designmap.xml with its includes in place, the <Properties> form on craft-xml elements, value codecs and the package writer; and InDesign Tagged Text, read and written.
craft-ical: iCalendar (RFC 5545) building blocks, from MailCraft: content lines, DATE/DATE-TIME values, durations, TEXT escaping, the common subset of recurrence rules, and VTIMEZONE definitions read and written. No time-zone database; what events and to-dos mean stays in each app. Bounded and panic-free on hostile input.
craft-stream-codecs: byte-stream and bi-level image codecs that PDF, PostScript and TIFF share: LZW, ASCII85, ASCIIHex, RunLength, TIFF and PNG predictors, CCITT Group 3 and 4 decoding and Group 4 encoding, lossless JBIG2 encoding. Every decoder is bounded and returns its partial output on damage. From PdfCraft; a PDF filter chain is built on it in craft-pdf.
craft-timeline: editorial timeline interchange: exact media time and SMPTE timecode, import/export reports, media path and file:// URL handling, Avid Log Exchange (ALE) and CMX 3600 EDL documents, format detection. From FilmCraft.
craft-metadata: photo metadata, from LightCraft: EXIF (read and write, maker-note lens and focus point, every tag by name), IPTC-IIM, XMP packets (read, write, and a merge that keeps what another program wrote), GPX track logs, and the blocks that carry them in JPEG, PNG, WebP, TIFF-based, RAF and CR3 files. One Metadata model for all of them. Built on craft-tiff.
craft-tiff: TIFF and BigTIFF IFD reader and writer, from LightCraft: every field type, the IFD chain, SubIFDs and Exif/GPS/Interop pointer IFDs, maker-note IFDs (Canon, Nikon, Sony, Fujifilm, Olympus, Panasonic, Pentax), strip and tile layout. Bounded and panic-free on hostile input. Pixel decompression stays with the callers.
craft-metafile: Windows metafiles, from DeckCraft, WordCraft and VectorCraft: a WMF, EMF and EMF+ reader into a neutral picture (paths with line styles, pattern fills, bitmaps, text, clip regions and clip paths) and, behind write, EMF and WMF writers. Bounded and panic-free on hostile input. Mapping the picture onto a document stays in each app.
craft-psd: Adobe Photoshop PSD and PSB reader and writer, from PhotoCraft: a lossless format-level model (layers, masks, tagged blocks, image resources, descriptors, all four compressions, lazy reading from a file) that writes an unmodified file back byte for byte, a builder for new files, and the Photoshop resource files that share its primitives (.abr, .asl, .aco, .act, .ase, .grd, .pat, .atn, .csh, .shc) and the Photoshop blocks of a layered TIFF. Bounded and panic-free on hostile input. Compositing and the mapping onto a document stay in each app.
craft-jmap: the JMAP protocol core (RFC 8620), from MailCraft, without sockets: session, requests of method calls with back-references, responses, ids, address templates, credentials and the judgement of HTTP answers, over any HTTP implementation. Bounded on hostile answers; what a program asks and makes of the answers stays in it.
craft-jpeg: clean-room decoder for 12-bit and arithmetic-coded JPEG (T.81 SOF0/SOF1 at 12 bits, SOF9, SOF10), from PhotoCraft, and a frame probe for routing. Metadata stays in each app.
craft-raster-codecs: small raster formats, one module each, from PhotoCraft: DDS (BC1 to BC3, read and write), DICOM, FITS (read and write), IFF/ILBM (read and write), PCX, PNM/PAM/PFM (read and write) and XPM, into one flat image type. Bounded and panic-free on hostile input. Colour, orientation and the document mapping stay in each app.
craft-kiwi: clean-room decoder and encoder for the kiwi binary schema format (the encoding inside .fig files): a schema of enums, structs and messages, and messages decoded with it into a tree keyed by field name. Bounded on hostile input. Carved from FigCraft.
craft-keymap: keyboard bindings: chords and their text forms, scopes, conflicts, user overrides stored through craft-settings and import of other applications' shortcut sets. Command catalogs, file readers and the shortcut editor UI stay in each app.
craft-audio: audio file I/O and codecs (WAV, AIFF, FLAC, AAC, Opus, AC-3/E-AC-3, MP1/MP2, MP3 encoding), streaming and seeking, and packet decoding for any demuxer. See its README for formats and features.
craft-media: bit-level I/O (bitstream), clean-room MP4/MOV (isobmff), Matroska/WebM (matroska) and MXF (mxf) demuxers and muxers, Ogg (ogg), AVI (avi) and MPEG-TS/PS (mpegts) demuxers, from FilmCraft, and an ISO BMFF box reader. Containers only; codecs are in craft-audio, and video codecs will go in a separate crate.
craft-lottie: Lottie (Bodymovin) JSON: the document model of lottie-spec 1.0 (animation, assets, layers by type, shape items, masks, effects, text, markers) with a bounded reader and a writer that keep what they do not know, and the encodings of its values (keyframes, ease tangents, bezier paths, gradients, data URIs). From EffectCraft; mapping onto an app's document stays in the app.
craft-menu: an app's menus as a macOS menu bar: the Mac layout (app menu, Window, Help, system-key clashes), a platform backend trait, and key equivalents fed back to egui as the input egui-winit would have made. Commands and their enabled state stay in each app.
craft-mesh: 3D mesh file formats behind one neutral model (meshes of polygons with per-corner indices, materials, a node hierarchy): STL, OBJ with MTL, PLY, glTF 2.0 / GLB and 3MF, one feature each. Readers are bounded by Limits, never open a file themselves glTF 2.0 / GLB and FBX, one feature each. Readers are bounded by Limits, never open a file themselves and never panic. Carved from EffectCraft, SolidCraft, TextureCraft and MaterialCraft.
craft-midi: Standard MIDI Files: a bounded reader for formats 0, 1 and 2 and a format-1 writer, over a neutral model of notes and channel events in ticks at 960 per quarter note. From SoundCraft.
craft-mime: Internet messages and MIME, read and written: RFC 5322 header fields, MIME parts and multiparts, encoded-words, RFC 2231 parameters, base64 and quoted-printable, character sets, address lists, dates, mbox files and the multipart/related lookups of MHT web archives. What a message means (body, attachments, flags) stays in each app.
craft-odf: OpenDocument packages (ODF 1.3 Part 2), read and written: the ZIP container with its mimetype and manifest within limits, password protection (AES-256-CBC with PBKDF2, as LibreOffice writes it) and flat single-file documents. The container only: what the XML inside means belongs to the readers of each document type.
craft-prc: a reader for PRC (ISO 14739-1), the 3D model format of PDF 3D annotations: container, bit-level primitives, schema, tessellations and the product tree as placed, coloured triangle meshes and a model tree. Bounded on hostile input. From PdfCraft; rendering stays in the app.
craft-offcrypto: clean-room Office document cryptography ([MS-OFFCRYPTO]): password-encrypted OOXML packages on craft-cfb (agile and standard encryption read, with the integrity check enforced; agile written), unsupported schemes named, and the password hashes of document and sheet protection.
craft-ods: OpenDocument spreadsheets (.ods, .ots) on craft-odf: the tables of content.xml with typed values, displayed text, formulas as text, style names, repeats expanded and merged cells, with dates and durations as serial numbers. Bounded cells, merges and text; strict XML.
craft-opc: Open Packaging Conventions, the ZIP container of DOCX, XLSX and PPTX files: bounded readers (every part up front, or on demand), part names, relationships, content types and a deterministic package writer. What the parts hold stays with each format's crate.
craft-pcraft-format: the envelope of PhotoCraft's .pcraft bundle: Manifest<D> with the document as a type parameter, TileRef, the entry paths, the manifest decode limits and the migration runner. The document model stays in PhotoCraft.
craft-penpot: clean-room reader and writer for the Penpot 2.x export container (.penpot): the ZIP archive, its manifest, the per-file, per-page and per-shape JSON members and media objects, as the JSON the file holds. Bounded on hostile input. Carved from FigCraft.
craft-plotter: cutter and pen-plotter command languages: HP-GL, DMPL and GP-GL (plain and the Silhouette dialect, three generations, registration marks) from a job in millimetres, plus the Silhouette device queries and reply parsers. No I/O.
craft-print: PDF submission to CUPS and Windows, printer discovery, duplex/copies/colour and driver preferences. PDF generation stays in each app.
craft-proof: proofing per language (spelling, suggestions, grammar, hyphenation, a Hunspell reader, user words, Language packs). The word lists and patterns are craft-i18n's language-data/, embedded at build time from CRAFT_I18N_DIR: English and the carry-over locales by default, the set CRAFT_PROOF_EMBED names otherwise (en for English only); other languages come from installed Language packs.
craft-pst: Outlook personal folders files (.pst, [MS-PST]) read over any Read + Seek, from MailCraft: the node database, property and table contexts, folders, messages, recipients, attachments, attached messages and named properties, ANSI and Unicode, encoded or not, with a password. Salvages damaged files. Bounded and panic-free on hostile input. What an item means stays in each app.
craft-quit: native macOS quit, egui close handling and an optional app menu. Unsaved-document decisions and save prompts stay in each app.
craft-rtf: Rich Text Format: a tokenizer, text decoding in the file's code pages (\uN, \'hh, single-byte and East Asian multibyte pages), escaping and dates, and a reader and writer for a small neutral model (paragraphs, character formatting, outline levels, tables).
craft-settings: config.toml settings storage for every app: platform folders, portable mode and overrides, atomic saves while running, backup, damaged-file recovery and schema migrations. Policy in docs/settings-storage.md.
craft-sheet: spreadsheet vocabulary shared by craft-xls, craft-xlsx and craft-ods: cell positions and A1 text, cell values and error values, sheet-name quoting, Excel's built-in number formats and indexed colour palette. Not a file format; no dependencies.
craft-silhouette-studio: bounded, fail-closed reader for Silhouette Studio .studio and .studio3 documents: outlines, line colours and page size in millimetres. Protected designs are refused.
craft-sketch: clean-room reader for the .sketch container (Sketch 48 and newer): the ZIP archive, the version cut, document.json, the pages in document order and images, as the JSON the file holds. Bounded on hostile input. Carved from FigCraft.
craft-svg: SVG. sniff recognises SVG and SVGZ data; svgz unpacks SVGZ within a byte limit, decodes UTF-8, UTF-16 and ISO 8859-1, and compresses; guard bounds element nesting and entity expansion before any XML reader sees the text; paths reads geometry (shapes, transforms, <use>/<symbol> instances and the CSS cascade as Bézier paths in millimetres, each tagged by the caller); color parses CSS colours; write writes documents (elements with escaping, path data, numbers). Feature tree: the full parser, usvg at the one version every Craft app uses, re-exported behind an entry point that runs those checks first (plus nesting with references followed, attribute counts, bounded embedded SVGs), and a budget check for drawing a tree with resvg. Apps take usvg from here, not as their own dependency.
craft-svg-paths: the former name of craft-svg's paths, color and write; re-exports them for existing users.
craft-text: text processing below the composer. Its hyphen module finds hyphenation points, with a bundled US English dictionary and patterns and optional hypher patterns for 47 more languages (one cargo feature each).
craft-ui: SVG catalogs, icon buttons, tabs, pane controls, transactional docking, print settings and theme helpers for egui frontends; assets, themes, localization and command handling stay in each app. Requires Rust 1.95 or later.
craft-vcard: vCard contacts, from MailCraft: vCard 2.1, 3.0 and 4.0 read (legacy character sets, quoted-printable, labels and Apple label groups, KEY certificates and OpenPGP public keys), vCard 3.0 written. Bounded and panic-free on hostile input. The mapping onto an app's contact type stays in each app.
craft-vectorcraft-format: the envelope of VectorCraft's .vectorcraft file: its members, versions, embedded images and the data after the JSON, with the document as a type parameter. The document and its migrations stay in VectorCraft.
craft-vectordrawable: Android Vector Drawable writer: a model of paths, groups, clip outlines, strokes and linear, radial and sweep gradients; the XML as Android Studio formats it; and the mapping of a gradient on any affine frame to what a drawable can say. What a drawable cannot draw is the caller's to bake in or leave out. No reader.
craft-web-api: the page command API every Craft web build offers its page — one window.<app> shape (request, execute, commands, docInspect, uiInspect, screenshot) over the app's JSON control channel.
craft-web-host: the host messages between a Craft app's web build and the page that hosts it (?host=parent or data-host="page"): one contract and one bridge for every app.
craft-webp: the WebP container, from EffectCraft (reader) and PhotoCraft (writer): canvas size, alpha and every animation frame's timing from the chunk headers without decoding, and the RIFF container around an encoded VP8 frame with alpha, ICC, EXIF and XMP chunks. The VP8 and VP8L codecs are not part of it.
craft-xls: clean-room Excel 97-2003 workbook (.xls, BIFF8) reader: worksheets, cell values, formulas as A1 text (shared and array formulas included), cell formats with resolved palette colours, merged cells, column and row records, defined names, print areas and calculation settings, with limits on records, cells and text.
craft-wordmodel: a word-processing document model (stories, paragraphs, runs, tables, sections, styles, numbering, fields, notes, comments, revisions, drawings, math): what the text-format crates read into and write from. WordCraft's model without its editing code.
craft-xlsx: Excel workbooks (.xlsx, .xlsm, SpreadsheetML, transitional and strict) and binary workbooks (.xlsb) on craft-opc: the workbook part, shared strings, the styles tables and worksheet rows streamed one at a time, with limits on the package, the XML and the binary records.
craft-ora: OpenRaster documents (.ora): the ZIP archive and the stack.xml layer tree as written, read with bounded sizes and written. From PhotoCraft.
craft-y4m: YUV4MPEG2 (.y4m) reader, from FilmCraft: the stream header, colour space layouts at 8 to 16 bits, a frame index built from the FRAME lines without loading the file, and plane access. Bounded on hostile input.
craft-kra: Krita documents (.kra, .krz), read: the ZIP archive, the maindoc.xml node tree as written, and the tiled pixel files with their LZF compression, a tile at a time. From PhotoCraft.
craft-xcf: GIMP XCF images (.xcf, .xcf.gz), read: header, properties, parasites, layers with their item paths, channels, and tiled pixels (uncompressed, RLE, zlib) at every precision, under a caller's byte budget. From PhotoCraft.
craft-xml: bounded XML for hostile input: an owned element tree with limits on size, depth, nodes and attributes, streaming of repeated elements, namespace handling (as written, by local name, or canonical prefixes by URI), escaping and a writer. No DTDs and no entity expansion.
craft-zip: ZIP archives from untrusted files: an entry-count check before the archive is indexed (ZIP64 included), entry reads within per-entry and total budgets that count real bytes, duplicate-name detection, a strict structure preflight, and a deterministic stored/deflate writer. The shared ZIP layer for the package formats.
Shared UI component audit: source inventory, extraction priorities and compatibility boundaries across the Craft suite.
Theme infrastructure: eight-app comparison and the small shared widget-state styling boundary.
Panel docking: validated panel moves, floating groups, workspace adapters and an optional egui docking surface.

License and credits

Bundled fonts, icons, images and other assets keep their own open licenses; each one is listed with its author, source and license in ATTRIBUTION.md.