pyproject.toml

[project]
name = "security-agent"
version = "0.0.0"
requires-python = ">=3.11"
dependencies = [
  "aiofiles>=23.0,<25.0",
  "pydantic>=2.0",
  "sweagent @ git+https://github.com/SWE-agent/SWE-agent.git@v1.0.1",
  "tqdm>=4.60,<5.0",
  "httpx>=0.24",
  "fastapi>=0.110",
  "uvicorn[standard]>=0.27",
  "anthropic>=0.40",
  "sse-starlette>=2.0",
]

[project.optional-dependencies]
# Graph-based deterministic Phase 02c (speca#157). Opt-in: the LLM 02c path has
# no extra deps; only --code-resolution graph needs the Tree-sitter grammars.
graph-02c = [
  "tree-sitter>=0.21",
  "tree-sitter-language-pack>=0.2",
  "tree-sitter-c-sharp>=0.21",
]

[project.scripts]
speca-web = "web.server.cli:main"

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

# Only the web/ tree is shipped as an importable Python package. The rest of
# the repository (scripts/, cli/, tests/, ...) stays out of the wheel so the
# build stays fast and we don't accidentally publish ad-hoc tooling.
[tool.hatch.build.targets.wheel]
packages = ["web"]

# `sweagent` is sourced from a git URL; hatchling requires an explicit opt-in
# to accept direct references in `project.dependencies`.
[tool.hatch.metadata]
allow-direct-references = true

# Dependencies of the Python core (scripts/run_phase.py + scripts/orchestrator/)
# that ships with the npm CLI. Source of truth for cli/scripts/vendor-core.mjs,
# which generates cli/vendor/speca-core/pyproject.toml from this list. Keep the
# version constraints in sync with [project].dependencies above and the list in
# sync with the actual third-party imports under scripts/.
[tool.speca]
core-dependencies = [
  "aiofiles>=23.0,<25.0",
  "pydantic>=2.0",
  "tqdm>=4.60,<5.0",
  "httpx>=0.24",
]

[tool.pytest.ini_options]
# ``asyncio_mode=auto`` lets us decorate async tests with the plain
# ``@pytest.mark.asyncio`` marker without also wiring a fixture; required
# by web/server/tests/test_run_supervisor.py (Slice H1).
asyncio_mode = "auto"

[dependency-groups]
dev = [
  "playwright>=1.59.0",
  "pytest>=7.0",
  "pytest-asyncio>=0.23",
]
benchmark = [
  "matplotlib>=3.7",
  "numpy>=1.24",
]
# Used by scripts/datasets/* (build_derived, publish_hf, load helper) and
# any consumer that loads from the NyxFoundation HF org. Install with
# `uv sync --group datasets`.
datasets = [
  "huggingface_hub>=0.20",
  "datasets>=2.16",
  "pandas>=2.0",
  "pyarrow>=14.0",
  "jinja2>=3.0",
]