pyproject.toml

[project]
name = "provenance-risk-agent"
version = "0.3.0"
description = "A LangChain + LangGraph analyst for software-supply-chain provenance evidence"
requires-python = ">=3.11"
dependencies = [
  "fastapi>=0.115,<1.0",
  "langchain>=1.0,<2.0",
  "langgraph>=1.0,<2.0",
  "langgraph-checkpoint-sqlite>=3.1,<4.0",
  "mcp>=1.28,<2.0",
  "pydantic>=2.7,<3.0",
  "typer>=0.12,<1.0",
  "rich>=13.7,<15.0",
  "uvicorn[standard]>=0.30,<1.0",
]

[project.optional-dependencies]
openai = ["langchain-openai>=1.0,<2.0"]
dev = ["httpx>=0.27,<1.0", "pytest>=8.0,<9.0", "ruff>=0.8,<1.0"]
live = [
  "albs-provenance-explorer @ https://github.com/xsub/albs-provenance-explorer/archive/9d33703ae923e03f3c77bd0d27a3c58ae37d638f.tar.gz",
  "unified-dependency-graph @ https://github.com/xsub/EnterpriseLinux-SoftwareSupplyChain/archive/4ca0b0042bfe7b91b45b27f0af6054b3847afef6.tar.gz",
]

[project.scripts]
provenance-agent = "provenance_agent.cli:app"

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[tool.hatch.build.targets.wheel]
packages = ["src/provenance_agent"]

[tool.hatch.metadata]
allow-direct-references = true

[tool.pytest.ini_options]
pythonpath = ["src"]