refactor(build): use vergen AddCustomEntries for WALLHACK_BUILD_PROFILE

Route the build profile env var through vergen's custom entries API
instead of a manual println. Strip unused cargo/rustc features from
vergen-gitcl. Add DO NOT BUMP comment to bloat thresholds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: maxholman

crates/cli/Cargo.toml

@@ -51,6 +51,7 @@ wallhackd = { path = "../daemon", default-features = false }
 zeroize = "1"
 
 [build-dependencies]
+anyhow = "1"
 vergen-gitcl = { version = "9.1", features = ["build"] }
 
 [lints]

crates/cli/build.rs

@@ -1,15 +1,42 @@
-use vergen_gitcl::{BuildBuilder, Emitter, GitclBuilder};
+use std::collections::BTreeMap;
 
-fn main() -> Result<(), Box<dyn std::error::Error>> {
-    // PROFILE is a standard Cargo build env var; emit it for use via env!() in source.
-    println!(
-        "cargo:rustc-env=WALLHACK_BUILD_PROFILE={}",
-        std::env::var("PROFILE").unwrap_or_else(|_| "unknown".to_string())
-    );
+use vergen_gitcl::{
+    AddCustomEntries, BuildBuilder, CargoRerunIfChanged, CargoWarning, DefaultConfig, Emitter,
+    GitclBuilder,
+};
+
+#[derive(Default)]
+struct WallhackBuildEnv;
+
+impl AddCustomEntries<&str, &str> for WallhackBuildEnv {
+    fn add_calculated_entries(
+        &self,
+        _idempotent: bool,
+        cargo_rustc_env_map: &mut BTreeMap<&str, &str>,
+        _cargo_rerun_if_changed: &mut CargoRerunIfChanged,
+        _cargo_warning: &mut CargoWarning,
+    ) -> anyhow::Result<()> {
+        let profile = std::env::var("PROFILE").unwrap_or_else(|_| "unknown".to_string());
+        cargo_rustc_env_map.insert("WALLHACK_BUILD_PROFILE", Box::leak(profile.into_boxed_str()));
+        Ok(())
+    }
 
+    fn add_default_entries(
+        &self,
+        _config: &DefaultConfig,
+        _cargo_rustc_env_map: &mut BTreeMap<&str, &str>,
+        _cargo_rerun_if_changed: &mut CargoRerunIfChanged,
+        _cargo_warning: &mut CargoWarning,
+    ) -> anyhow::Result<()> {
+        Ok(())
+    }
+}
+
+fn main() -> Result<(), Box<dyn std::error::Error>> {
     Emitter::default()
         .add_instructions(&BuildBuilder::default().build_timestamp(true).build()?)?
         .add_instructions(&GitclBuilder::default().sha(true).dirty(true).build()?)?
+        .add_custom_instructions(&WallhackBuildEnv)?
         .emit()?;
     Ok(())
 }

crates/mcp/Cargo.toml

@@ -16,6 +16,7 @@ wallhack-ipc = { path = "../ipc", features = ["vsock"] }
 wallhack-wire = { path = "../wire" }
 
 [build-dependencies]
+anyhow = "1"
 vergen-gitcl = { version = "9.1", features = ["build"] }
 
 [lints.rust]

crates/mcp/build.rs

@@ -1,13 +1,42 @@
-use vergen_gitcl::{BuildBuilder, Emitter, GitclBuilder};
+use std::collections::BTreeMap;
+
+use vergen_gitcl::{
+    AddCustomEntries, BuildBuilder, CargoRerunIfChanged, CargoWarning, DefaultConfig, Emitter,
+    GitclBuilder,
+};
+
+#[derive(Default)]
+struct WallhackBuildEnv;
+
+impl AddCustomEntries<&str, &str> for WallhackBuildEnv {
+    fn add_calculated_entries(
+        &self,
+        _idempotent: bool,
+        cargo_rustc_env_map: &mut BTreeMap<&str, &str>,
+        _cargo_rerun_if_changed: &mut CargoRerunIfChanged,
+        _cargo_warning: &mut CargoWarning,
+    ) -> anyhow::Result<()> {
+        let profile = std::env::var("PROFILE").unwrap_or_else(|_| "unknown".to_string());
+        cargo_rustc_env_map.insert("WALLHACK_BUILD_PROFILE", Box::leak(profile.into_boxed_str()));
+        Ok(())
+    }
+
+    fn add_default_entries(
+        &self,
+        _config: &DefaultConfig,
+        _cargo_rustc_env_map: &mut BTreeMap<&str, &str>,
+        _cargo_rerun_if_changed: &mut CargoRerunIfChanged,
+        _cargo_warning: &mut CargoWarning,
+    ) -> anyhow::Result<()> {
+        Ok(())
+    }
+}
 
 fn main() -> Result<(), Box<dyn std::error::Error>> {
-    println!(
-        "cargo:rustc-env=WALLHACK_BUILD_PROFILE={}",
-        std::env::var("PROFILE").unwrap_or_else(|_| "unknown".to_string())
-    );
     Emitter::default()
         .add_instructions(&BuildBuilder::default().build_timestamp(true).build()?)?
         .add_instructions(&GitclBuilder::default().sha(true).dirty(true).build()?)?
+        .add_custom_instructions(&WallhackBuildEnv)?
         .emit()?;
     Ok(())
 }