From da4dc44f8067d028a37ceeb841d7e0499dd4cbfe Mon Sep 17 00:00:00 2001
From: adlee-was-taken <aaron.daniel.lee@gmail.com>
Date: Fri, 19 Jun 2026 22:51:27 -0400
Subject: [PATCH] feat(core/org): add x25519-dalek dep + stub org module

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TJo44YM3UbBjro2fG6NrKy
---
 Cargo.lock                       | 13 +++++++++++++
 crates/relicario-core/Cargo.toml |  1 +
 crates/relicario-core/src/lib.rs |  2 ++
 crates/relicario-core/src/org.rs |  1 +
 4 files changed, 17 insertions(+)
 create mode 100644 crates/relicario-core/src/org.rs

diff --git a/Cargo.lock b/Cargo.lock
index 1bda3a4..1705b66 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2209,6 +2209,7 @@ dependencies = [
  "thiserror 2.0.18",
  "unicode-normalization",
  "url",
+ "x25519-dalek",
  "zeroize",
  "zstd",
  "zxcvbn",
@@ -3709,6 +3710,18 @@ version = "0.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ea6fc2961e4ef194dcbfe56bb845534d0dc8098940c7e5c012a258bfec6701bd"
 
+[[package]]
+name = "x25519-dalek"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
+dependencies = [
+ "curve25519-dalek",
+ "rand_core",
+ "serde",
+ "zeroize",
+]
+
 [[package]]
 name = "yoke"
 version = "0.8.2"
diff --git a/crates/relicario-core/Cargo.toml b/crates/relicario-core/Cargo.toml
index e4acec6..474ce41 100644
--- a/crates/relicario-core/Cargo.toml
+++ b/crates/relicario-core/Cargo.toml
@@ -16,6 +16,7 @@ sha2 = "0.10"
 sha1 = "0.10"
 hmac = "0.12"
 ed25519-dalek = { version = "2", features = ["rand_core"] }
+x25519-dalek = { version = "2", features = ["static_secrets"] }
 ssh-key = { version = "0.6", features = ["ed25519", "std"] }
 image = { version = "0.25", default-features = false, features = ["jpeg"] }
 
diff --git a/crates/relicario-core/src/lib.rs b/crates/relicario-core/src/lib.rs
index 237a2d1..829ac50 100644
--- a/crates/relicario-core/src/lib.rs
+++ b/crates/relicario-core/src/lib.rs
@@ -93,6 +93,8 @@ pub use import_lastpass::{parse_lastpass_csv, ImportWarning};
 pub mod device;
 pub use device::{fingerprint, DeviceEntry, RevokedEntry, generate_keypair, sign, verify};
 
+pub mod org;
+
 pub mod tar_safe;
 pub use tar_safe::{safe_unpack_git_archive, DEFAULT_MAX_UNCOMPRESSED};
 
diff --git a/crates/relicario-core/src/org.rs b/crates/relicario-core/src/org.rs
new file mode 100644
index 0000000..5444b35
--- /dev/null
+++ b/crates/relicario-core/src/org.rs
@@ -0,0 +1 @@
+//! Org vault types, crypto, and schema for multi-user self-hosted deployments.