[package]
name = "joule-code-collab"
version.workspace = true
edition.workspace = true
license.workspace = true
repository.workspace = true
rust-version.workspace = true
description = "Joule Code — federated collaboration interface + single-node reference cluster (SPEC §7, spec/collab.md). Research: the API and the ordered/deduped/signature-checked log shape; full BFT/MLS/FROST/CommunicationOS federation is future work."

[dependencies]
joule-code-schema.workspace = true
joule-code-cargo.workspace = true
thiserror.workspace = true
frost-ed25519 = "2"

[dev-dependencies]
ed25519-dalek.workspace = true
rand = "0.8"
# MLS group keying (RFC 9420) for the collaborating set — demonstrated in
# tests/mls_keying.rs. Dev-dep so the library's runtime deps stay light.
# Pinned to the same generation joule-moq-mls runs in production. They were
# two generations apart, which put a second, older MLS stack in the test graph
# and with it hpke-rs 0.2.0 — RUSTSEC-2026-0071 (nonce reuse in an HPKE
# context) and -0069/-0070/-0072. Nothing shipped it, but there is no reason to
# test RFC 9420 against an implementation production does not use.
openmls = "=0.9.1"
openmls_rust_crypto = "=0.6.0"
openmls_basic_credential = "=0.6.0"