pyproject.toml

[build-system]
requires = ["setuptools>=82.0.1", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "teaagent"
version = "0.1.0"
description = "Governance-first agent harness for autonomous coding tasks."
readme = "README.md"
requires-python = ">=3.10"
license = {file = "LICENSE"}
keywords = ["agent", "governance", "mcp", "audit", "llm"]
classifiers = [
    "Development Status :: 3 - Alpha",
    "Intended Audience :: Developers",
    "License :: OSI Approved :: MIT License",
    "Operating System :: OS Independent",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Software Development :: Libraries :: Python Modules",
    "Topic :: Scientific/Engineering :: Artificial Intelligence",
]
dependencies = [
    "bandit>=1.9.4",
]

[tool.setuptools.packages.find]
include = ["teaagent*"]

[tool.setuptools.package-data]
teaagent = ["py.typed"]

[project.optional-dependencies]
config = [
    "tomli>=2.0.1; python_version < '3.11'",
]
file-watching = [
    "watchdog>=3.0.0",
]
tui = [
    "prompt-toolkit>=3.0.0",
]
code-analysis = [
    "tree-sitter>=0.25.0",
    "tree-sitter-language-pack>=1.0.0",
]
graphqlite = [
    "graphqlite>=0.6.0",
    "pysqlite3>=0.6.0",
]
playwright = [
    "playwright>=1.40",
]
crypto = [
    "cryptography>=48.0.0",
]
oauth = [
    "teaagent[crypto]",
]
audit-encryption = [
    "teaagent[crypto]",
]
managed-google-adk = [
    "google-adk>=2.0.0",
]
managed-vertex = [
    "google-cloud-aiplatform>=1.156.0",
]
telemetry = [
    "opentelemetry-api>=1.20",
    "opentelemetry-sdk>=1.20",
    "opentelemetry-exporter-otlp-proto-http>=1.41.1",
]
anthropic = [
    "anthropic>=0.40.0",
]
yaml = [
    "pyyaml>=6.0",
]
wasm = [
    "wasmer>=1.0.0",
]
release = [
    "build>=1",
    "twine>=5",
]
security = [
    "pip-audit>=2",
]
sigstore = [
    "sigstore>=4.3.0",
]
github = [
    "PyGithub>=2.0.0",
]
dev = [
    "graphqlite>=0.6.0",
    "pysqlite3>=0.6.0",
    "teaagent[crypto]",
    "watchdog>=3.0.0",
    "prompt-toolkit>=3.0.0",
    "playwright>=1.40",
    "sigstore>=4.3.0",
    "PyGithub>=2.0.0",
    "wasmer>=1.0.0",
    "pre-commit>=3",
    "pytest>=7",
    "pytest-cov>=4",
    "pytest-random-order>=1.2.0",
    "pytest-xdist>=3.5",
    "pytest-benchmark>=4.0",
    "hypothesis>=6.100",
    "ruff>=0.15.16",
    "mypy>=1,<3",
    "pdoc>=14",
    "tomli>=2.0.1; python_version < '3.11'",
    "tree-sitter>=0.25.0",
    "tree-sitter-language-pack>=1.0.0",
    "opentelemetry-api>=1.20",
    "opentelemetry-sdk>=1.20",
    "opentelemetry-exporter-otlp-proto-http>=1.41.1",
    "google-adk>=2.0.0",
    "google-cloud-aiplatform>=1.156.0",
    "bandit>=1.7",
]

[project.scripts]
teaagent = "teaagent.cli:main"

[tool.uv]
constraint-dependencies = [
    "jaraco-context>=6.1.0",
]
override-dependencies = [
    "tuf>=7.0.0,<8",
    # Pin alpha OpenTelemetry GCP packages to stable versions for production
    "opentelemetry-exporter-gcp-logging>=1.12.0,<2.0.0",
]

[tool.pytest.ini_options]
testpaths = ["tests"]
pythonpath = [".", "tests"]
addopts = "-p no:cacheprovider"
markers = [
    "integration: real entry-point behavioral tests (run with -m integration)",
    "smoke: fast PR-gate unit/regression tests (run with scripts/run_test_tier.py --tier smoke)",
    "acceptance: user-facing workflow tests under tests/acceptance/",
    "nightly: slow, integration, mutation, or full-suite tests (run with --tier nightly)",
    "slow: long-running test excluded from smoke tier",
]

[tool.mypy]
python_version = "3.10"
ignore_missing_imports = true
exclude = ["examples/", "scripts/", "benchmarks/"]
disallow_untyped_defs = true
disallow_incomplete_defs = true
check_untyped_defs = true
warn_unused_ignores = true
warn_redundant_casts = true
no_implicit_optional = true

[[tool.mypy.overrides]]
module = ["tests.*"]
disallow_untyped_defs = false
disallow_incomplete_defs = false
check_untyped_defs = true
# Suppress test-noise error codes; keep attr-defined, misc, name-defined etc. as signal
disable_error_code = [
    "arg-type",
    "union-attr",
    "var-annotated",
    "index",
    "return-value",
    "func-returns-value",
    "str-bytes-safe",
    "list-item",
    "dict-item",
    "operator",
    "method-assign",
    "override",
    "call-overload",
    "misc",
    "assignment",
]

[tool.bandit]
exclude_dirs = [
    "tests/",
    "examples/",
    "scripts/",
    "benchmarks/",
    ".git/",
    ".venv/",
    ".teaagent/",
    "build/",
    "dist/",
    "docs/",
]
skips = [
    "B101",  # assert statements are used intentionally in non-production paths
    "B102",  # exec used - sandboxed execution in child process
    "B104",  # bind all interfaces validation check
    "B105",  # hardcoded password string - triggers on env vars with 'secret' or 'token' in name
    "B106",  # hardcoded password funcarg
    "B110",  # try_except_pass
    "B112",  # try_except_continue
    "B310",  # urllib urlopen - safe/validated URL openings
    "B404",  # subprocess import - reviewed for safety in workspace tools
    "B603",  # subprocess_without_shell - false positive for inspect-only calls
    "B607",  # subprocess_with_partial_path - partial path is intended
    "B608",  # hardcoded sql expressions - triggers on string-formatted sqlite migration tables
]
targets = ["."]

[tool.coverage.run]
source = ["teaagent"]
# Per-test context reduces memory pressure from coverage tracking
# across 5000+ tests under pydantic-core instrumentation.
context = "test"
omit = [
    "teaagent/tui/*",
    "teaagent/tournament/*",
    "teaagent/validation/*",
    "teaagent/workflow_engine.py",
    "teaagent/vote_relay.py",
    "teaagent/tls_server.py",
    "teaagent/webhook_sink.py",
    "teaagent/wasm_runtime.py",
    "teaagent/wasm_skill.py",
    "teaagent/tsb_format.py",
    "teaagent/workspace_tools/builder.py",
    "teaagent/workspace_tools/_git.py",
    "teaagent/workspace_tools/_config.py",
    "teaagent/browser_tools.py",
    "teaagent/cli/_handlers/_cost.py",
    "teaagent/cli/_handlers/_control_plane.py",
]

[tool.ruff]
extend-exclude = [".git", ".teaagent", "__pycache__", ".pytest_cache", ".venv", "build", "dist"]