requirements-dev.txt

# Development dependencies for knowledge-rag contributors.
#
# Install:
#     pip install -r requirements-dev.txt
#
# Production dependencies live in pyproject.toml [project.dependencies].
# Keep this file lean — only what's needed to run tests, linters, and benches.

# ── Linting & formatting ────────────────────────────────────────────────────
ruff>=0.16.2,<1.0
pre-commit>=4.6.2,<5.0

# ── Tests ───────────────────────────────────────────────────────────────────
pytest>=9.1.1,<10.0
pytest-cov>=7.0.0
pytest-rerunfailures>=16.4    # flake detection (Pillar 2: Stability)
pytest-memray>=1.10.0; sys_platform != "win32"  # memory baseline (Pillar 3); memray Linux/macOS only
pytest-benchmark>=5.2.3       # micro-benchmarks
pytest-timeout>=2.3.0         # safety net for hung tests
hypothesis>=6.165.9            # property-based testing (Pillar 4: Versatility)

# ── Type checking & quality ─────────────────────────────────────────────────
mypy>=2.1.0
interrogate>=1.7.0             # docstring coverage (Pillar 7)
radon>=6.0.1                   # cyclomatic complexity
vulture>=2.16                  # dead-code detection

# ── Security & supply chain ─────────────────────────────────────────────────
bandit>=1.7.10                 # SAST (Pillar 1: Security)
pip-audit>=2.10.0               # CVE check on installed deps

# ── Memory + benchmarking (Pillar 3 + Pillar 5) ─────────────────────────────
psutil>=5.9.0                  # cross-platform RSS measurement for memory baselines

# ── Mutation testing (nightly only, optional locally) ───────────────────────
mutmut>=3.5.0                  # used by .github/workflows/nightly.yml