[package]
name = "bread-module-host"
version = "0.7.0"
edition = "2021"

[[bin]]
name = "bread-module-host"
path = "src/main.rs"

# Deliberately minimal dependency footprint (Workstream G): this binary is
# itself reviewable attack surface running third-party Lua under an
# OS-level sandbox constructed by breadd's parent process (see
# breadd/src/module_host.rs) — it does not depend on landlock itself, since
# the Landlock ruleset is applied by breadd via Command::pre_exec() *before*
# this binary's own main() ever runs (landlock_restrict_self() applies to
# the calling process across the subsequent execve()).
[dependencies]
bread-shared = { path = "../bread-shared" }
serde.workspace = true
serde_json.workspace = true
tokio = { version = "1.40", features = ["net", "io-util", "rt", "rt-multi-thread", "time", "macros", "sync"] }
anyhow.workspace = true
tracing.workspace = true
tracing-subscriber.workspace = true
mlua = { version = "0.9", features = ["lua54", "vendored", "serialize"] }
uuid.workspace = true

[dev-dependencies]
tempfile.workspace = true