# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

[package]
name = "openshell-supervisor-network"
description = "Network component of the OpenShell supervisor: proxy, L7 enforcement, OPA, and denial aggregation"
version.workspace = true
edition.workspace = true
license.workspace = true
repository.workspace = true
rust-version.workspace = true

[dependencies]
openshell-sandbox-backend = { path = "../openshell-sandbox-backend" }
sha2 = { workspace = true }
openshell-binary-identity = { path = "../openshell-binary-identity" }
openshell-crypto = { workspace = true }
openshell-core = { path = "../openshell-core", features = ["oauth"] }
openshell-isolation-interface = { path = "../openshell-isolation-interface" }
openshell-ocsf = { path = "../openshell-ocsf" }
openshell-policy = { path = "../openshell-policy" }
openshell-policy-schema = { path = "../openshell-policy-schema" }
openshell-supervisor-middleware = { path = "../openshell-supervisor-middleware" }

async-trait = "0.1"

apollo-parser = { workspace = true }
aws-sigv4 = { version = "1", features = ["sign-http", "http1"] }
aws-credential-types = { version = "1", features = ["hardcoded-credentials"] }
aws-smithy-runtime-api = { version = "1", features = ["client"] }
http = { workspace = true }
base64 = { workspace = true }
bytes = { workspace = true }
flate2 = "1"
futures = { workspace = true }
glob = { workspace = true }
hex = "0.4"
hickory-proto = "0.26.1"
ipnet = "2"
miette = { workspace = true }
prost-types = { workspace = true }
rcgen = { workspace = true }
regorus = { version = "0.9", default-features = false, features = ["std", "arc", "glob", "yaml"] }
reqwest = { workspace = true }
rustls = { workspace = true }
rustls-native-certs = { workspace = true }
rustls-pemfile = { workspace = true }
serde = { workspace = true }
serde_json = { workspace = true }
serde_yml = { workspace = true }
sha1 = "0.10"
spiffe = { workspace = true }
tempfile = "3"
thiserror = { workspace = true }
tokio = { workspace = true }
tokio-rustls = { workspace = true }
tonic = { workspace = true }
tower-mcp-types = { workspace = true }
tracing = { workspace = true }
uuid = { workspace = true }
webpki-roots = { workspace = true, optional = true }

[features]
default = ["bundled-ca-roots"]
bundled-ca-roots = ["dep:webpki-roots"]

[dev-dependencies]
openshell-sandbox-backend = { path = "../openshell-sandbox-backend", features = ["test-support"] }

openshell-driver-vm = { path = "../openshell-driver-vm", default-features = false, features = ["allocation-tracking"] }
openshell-ocsf = { path = "../openshell-ocsf", features = ["test-support"] }
openshell-otel = { path = "../openshell-otel" }
openshell-supervisor-middleware-builtins = { path = "../openshell-supervisor-middleware-builtins" }
opentelemetry_sdk = { workspace = true, features = ["testing"] }
temp-env = "0.3"
tokio = { workspace = true, features = ["test-util"] }
tokio-tungstenite = { workspace = true }
tracing-subscriber = { workspace = true }
tokio-stream = { workspace = true, features = ["net"] }

[target.'cfg(unix)'.dependencies]
libc = "0.2"

[target.'cfg(target_os = "linux")'.dependencies]
nix = { workspace = true, features = ["socket", "net"] }

[target.'cfg(unix)'.dev-dependencies]
rustix = { workspace = true }

[lints]
workspace = true