hellhound

name = "hellhound"
version = "0.2.0"
target = "erlang"
gleam = ">= 1.18.0"
licences = ["Apache-2.0"]
description = "Typed OIDC / OAuth 2.0, standalone JWT signing and bounded HTTPS credential exchange for Gleam on Erlang/OTP."
repository = { type = "github", user = "gleam-dream", repo = "hellhound" }
internal_modules = ["hellhound/internal", "hellhound/internal/*"]

[dependencies]
gleam_stdlib = ">= 0.70.0 and < 2.0.0"
gleam_erlang = ">= 1.0.0 and < 2.0.0"
gleam_otp = ">= 1.0.0 and < 2.0.0"
gleam_json = ">= 3.0.0 and < 4.0.0"
telemetry = ">= 1.4.2 and < 2.0.0"
exception = ">= 2.1.1 and < 3.0.0"
gleam_crypto = ">= 1.6.0 and < 2.0.0"
gleam_time = ">= 1.11.0 and < 2.0.0"
# Cryptographic backend. Hellhound uses only public gose and kryptos
# APIs. The lower bounds are the versions the security evidence was recorded
# on (the design's dependency-provenance section); a newer resolved version must pass the suites.
gose = ">= 2.2.0 and < 3.0.0"
kryptos = ">= 1.5.0 and < 2.0.0"
sinal = ">= 0.1.0 and < 0.2.0"
http_gun = ">= 0.1.0 and < 0.2.0"
gleam_http = ">= 4.4.0 and < 5.0.0"

[dev-dependencies]
# Test-only oracles, pinned to the versions the evidence names: raw oidcc
# for the differential and probes, erlang-jose for the
# scripted provider's token signing, telemetry_registry for oidcc.
oidcc = "== 3.9.0"
jose = "== 1.11.13"
telemetry_registry = "== 0.3.2"
gleeunit = ">= 1.0.0 and < 2.0.0"