pyproject.toml

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "vulnchain"
version = "0.1.0"
description = "Autonomous AI-powered security auditing tool for software consultancies"
requires-python = ">=3.12"
dependencies = [
    "langgraph>=0.2.0",
    "langchain-anthropic>=0.1.0",
    "langchain-core>=0.2.0",
    "tree-sitter>=0.21.0",
    "tree-sitter-language-pack>=0.0.1",
    "gitpython>=3.1.40",
    "asyncpg>=0.29.0",
    "fastapi>=0.111.0",
    "uvicorn[standard]>=0.30.0",
    "typer>=0.12.0",
    "rich>=13.7.0",
    "pydantic>=2.7.0",
    "pydantic-settings>=2.3.0",
    "httpx>=0.27.0",
    "python-dotenv>=1.0.0",
    "sqlalchemy[asyncio]>=2.0.0",
    "anthropic>=0.28.0",
]

[project.optional-dependencies]
dev = [
    "pytest>=8.0.0",
    "pytest-asyncio>=0.23.0",
    "pytest-cov>=5.0.0",
    "ruff>=0.4.0",
    "mypy>=1.10.0",
]

[project.scripts]
vulnchain = "vulnchain.main:app"

[tool.hatch.build.targets.wheel]
packages = ["src/vulnchain"]

[tool.ruff]
line-length = 120
target-version = "py312"

[tool.ruff.lint]
select = ["E", "W", "F", "I", "N", "UP", "S", "B", "A", "C4", "RET", "SIM"]
ignore = [
    "S101",  # assert used in tests
    "S603",  # subprocess without shell=True is fine
    "S607",  # start process with partial path
    "S108",  # /tmp usage is intentional (configurable sandbox dir)
    "S104",  # 0.0.0.0 binding intentional for Docker
    "B008",  # typer.Option() in defaults is the standard Typer pattern
    "S310",  # URL open is for internal tooling only
]

[tool.mypy]
python_version = "3.12"
strict = true
ignore_missing_imports = true

# Third-party libraries (LangGraph, tree-sitter, GitPython) have incomplete
# or incompatible stubs — relax strict mode for files that use them directly.
[[tool.mypy.overrides]]
module = [
    "vulnchain.agent.graph",
    "vulnchain.agent.nodes",
    "vulnchain.analysis.ast_analyzer",
    "vulnchain.analysis.dependency_scanner",
    "vulnchain.api.app",
    "vulnchain.ingestion.repo",
    "vulnchain.main",
]
ignore_errors = true

[tool.pytest.ini_options]
asyncio_mode = "auto"
testpaths = ["tests"]