pyproject.toml

[build-system]
requires = ["hatchling==1.27.0"]
build-backend = "hatchling.build"

[project]
name = "tracecat"
description = "The open source AI automation platform for security teams and agents."
readme = "README.md"
requires-python = ">=3.12"
license = "AGPL-3.0"
authors = [{ name = "Tracecat", email = "founders@tracecat.com" }]
classifiers = [
    "Development Status :: 4 - Beta",
    "License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)",
    "Programming Language :: Python :: 3 :: Only",
    "Programming Language :: Python :: 3.12",
    "Intended Audience :: Developers",
    "Intended Audience :: Information Technology",
    "Intended Audience :: System Administrators",
    "Topic :: Security",
    "Topic :: System :: Systems Administration",
]
dependencies = [
    "aioboto3==15.5.0",
    "aiocache==0.12.3",
    "aiohttp==3.14.1",
    "alembic-postgresql-enum==1.7.0",
    "alembic==1.13.2",
    "async-lru==2.0.4",
    "asyncpg==0.29.0",
    "authlib==1.6.12",
    "cachetools==7.0.6",
    "claude-agent-sdk==0.1.51",
    "cloudpickle==3.1.1",
    "cramjam==2.11.0",
    "croniter==6.0.0",
    "cryptography==48.0.1",
    "dateparser==1.2.2",
    "defusedxml==0.7.1",
    "email-validator==2.2.0",
    "fastapi-users[sqlalchemy,oauth]==15.0.2",
    "fastapi[standard]==0.137.1",
    "fastmcp==3.2.0",
    "google-auth==2.48.0",
    "greenlet==3.0.3",
    "griffe==2.0.2",
    "httpx==0.28.1",
    "jsonpath_ng==1.7.0",
    "lark==1.1.9",
    "litellm[proxy]==1.89.1",
    "loguru==0.7.3",
    "minio==7.2.18",
    "opentelemetry-api==1.43.0",
    "opentelemetry-exporter-otlp-proto-http==1.43.0",
    "opentelemetry-instrumentation-fastapi==0.64b0",
    "opentelemetry-sdk==1.43.0",
    "orjson==3.11.7",
    "paramiko==3.5.0",
    "polyfile==0.5.6",
    "protobuf==6.33.5",
    "psycopg[binary]==3.1.19",
    "pydantic-extra-types==2.11.0",
    "pydantic==2.12.5",
    "pygithub==2.8.1",
    "pysaml2==7.5.0",
    "python-slugify==8.0.4",
    "redis[hiredis]==7.1.0",
    "sentry-sdk==2.24.1",
    "sqlalchemy==2.0.45",
    "starlette==1.3.1",
    "temporalio==1.20.0",
    "tenacity==8.3.0",
    "tomli==2.2.1",
    "tracecat-ee",
    "tracecat-registry",
    "uv==0.11.15",
    "uvicorn==0.35.0",
    "uvloop==0.21.0",
]
dynamic = ["version"]

[project.urls]
Homepage = "https://tracecat.com"
Documentation = "https://docs.tracecat.com/"
Repository = "https://github.com/TracecatHQ/tracecat"

[tool.uv.sources]
tracecat = { workspace = true }
tracecat-admin = { workspace = true }
tracecat-registry = { workspace = true }
tracecat-ee = { workspace = true }

[tool.uv.workspace]
members = ["packages/*"]

[tool.uv]
# Override dependency pins to resolve conflicts between packages:
override-dependencies = [
    "pyasn1==0.6.4",
    "requests==2.33.0",
    "aiohttp==3.14.1",
    "uvicorn==0.35.0",
    "boto3==1.40.61",
    "python-multipart==0.0.31",
    "rich==13.9.4",
    "grpcio==1.75.1",
    "grpcio-tools==1.75.1",
    "pillow==12.3.0",
    "mako==1.3.12",
    "fastapi-sso==0.19.0",
    "PyJWT==2.13.0",
    # Chardet 7.x is incompatible with PolyFile 0.5.6 binary detection.
    "chardet==6.0.0.post1",
    "fickling==0.1.12",
    "anthropic==0.87.0",
    "python-dotenv==1.2.2",
    "urllib3==2.7.0",
    "orjson==3.11.7",
    "fastapi==0.137.1",
    "cryptography==48.0.1",
]

[dependency-groups]
admin = ["tracecat-admin"]
lint = [
    "basedpyright==1.37.1",
    "types-aioboto3[sts,s3,secretsmanager]==15.5.0",
    "types-boto3[sts,s3,secretsmanager]==1.42.25",
]
dev = [
    "pre-commit==4.1.0",
    "psycopg==3.1.19",
    "pytest-benchmark==5.2.3",
    "pytest-mock==3.14.0",
    "pytest-repeat==0.9.3",
    "pytest-xdist==3.8.0",
    "pytest==8.3.2",  # pytest 9 breaks registry tests via autouse async fixture handling; dismiss alert for now
    "python-dotenv==1.2.2",
    "respx==0.22.0",
    "ruff==0.15.0",
    {include-group = "lint"},
]

[tool.hatch.version]
path = "tracecat/__init__.py"
pattern = '^__pep440_version__ = "(?P<version>[^"]+)"'

[tool.hatch.metadata]
allow-direct-references = true

[tool.hatch.build.targets.wheel]
# Ship the package, including non-Python data files such as built-in skill
# SKILL.md / reference markdown so importlib.resources can find them at runtime.
packages = ["tracecat"]
artifacts = [
    "tracecat/agent/skill/builtin/**/*.md",
]

[tool.ruff]
line-length = 88
fix = true

[tool.ruff.lint]
select = [
    "E",  # pycodestyle errors
    "W",  # pycodestyle warnings
    "F",  # pyflakes
    "I",  # isort
    "B",  # flake8-bugbear
    "C4", # flake8-comprehensions
    "UP", # pyupgrade
]
ignore = [
    "E501", # line too long, handled by ruff
    "B008", # do not perform function calls in argument defaults
    "W191", # indentation contains tabs
]

[tool.ruff.lint.per-file-ignores]
"tests/temporal/*" = ["E402"]  # pytestmark before imports is intentional

[tool.ruff.lint.pyupgrade]
# Preserve types, even if a file imports `from __future__ import annotations`.
keep-runtime-typing = true

[tool.pytest.ini_options]
# `scripts/` is not a package; put it on the path so the commit-convention
# tests can import scripts/commit_conventions.py and scripts/check_pr_title.py.
pythonpath = ["scripts"]
addopts = [
    "--strict-config",
    "--strict-markers",
    "-vvrP",
    "--benchmark-disable",
]
xfail_strict = true
log_level = "ERROR"
log_cli = true
log_cli_level = "ERROR"
filterwarnings = ["ignore:Pydantic serializer warnings:UserWarning"]
markers = [
    "anyio: marks tests as requiring the anyio pytest plugin",
    "webtest: marks tests that require the web",
    "slow: marks tests as slow",
    "dbtest: marks tests that make database calls",
    "disable_fixture: marks tests that disable fixtures",
    "integration: marks tests that perform live network calls and container operations",
    "llm: marks tests that perform LLM calls",
    "live_secret: marks tests that require real environment-backed third-party secrets",
    "ollama: mark tests that require Ollama",
    "temporal: marks tests that require Temporal server",
    "requires_api: marks tests that require a live Tracecat API endpoint",
    "regression: marks regression tests",
]

[tool.basedpyright]
pythonVersion = "3.12"
typeCheckingMode = "standard"
venvPath = "."
venv = ".venv"
include = ["tracecat", "packages", "alembic", "tests"]
exclude = ["scripts/", "**/__pycache__", "**/node_modules"]
# `scripts/` stays out of the checked set, but tests/unit/test_commit_conventions.py
# and tests/unit/test_check_pr_title.py import from it, so it has to resolve.
extraPaths = ["scripts"]
# Core type checking - keep enabled for catching real bugs
reportMissingTypeStubs = false    # Don't require stubs for all dependencies
reportUnusedImport = "warning"
reportUnusedVariable = "warning"
reportUnusedFunction = "warning"
reportDuplicateImport = "warning"
# Disable noisy warnings that don't indicate real bugs
reportAny = false
reportExplicitAny = false
reportUnknownArgumentType = false
reportUnknownLambdaType = false
reportUnknownMemberType = false
reportUnknownParameterType = false
reportUnknownVariableType = false
reportMissingParameterType = false
reportUnannotatedClassAttribute = false
reportUnusedCallResult = false
reportUnusedParameter = false
reportImplicitStringConcatenation = false
reportCallInDefaultInitializer = false
reportImplicitOverride = false
reportPrivateUsage = false
reportPrivateLocalImportUsage = false
reportImportCycles = false
reportUnnecessaryComparison = false
reportUnnecessaryIsInstance = false
reportUnnecessaryCast = false
reportDeprecated = false
reportMissingTypeArgument = false