pyproject.toml

[project]
name = "fincore"
version = "0.1.0"
description = "Durable business-operation identity for Razorpay refunds. Experimental proof-of-work."
requires-python = ">=3.12"

# Every dependency is justified:
#   sqlalchemy  - DB constraints are part of the correctness argument (leases, unique keys)
#   psycopg     - async PostgreSQL driver for SQLAlchemy 2.x
#   alembic     - schema migrations must be reproducible
#   httpx       - async HTTP with explicit per-request header control (X-Refund-Idempotency)
#   pydantic    - validated public input types at the library boundary
#   cryptography- Ed25519 for ExecutionGrant. Chosen over stdlib HMAC for one named
#                 property: the verifier holds only the PUBLIC key, so compromising
#                 the runtime yields no ability to mint financial authority. With
#                 HMAC the verifier necessarily holds the signing secret, which
#                 collapses the issuer/verifier distinction the layer exists for.
dependencies = [
    "sqlalchemy>=2.0.30",
    "psycopg[binary]>=3.2",
    "alembic>=1.13",
    "httpx>=0.27",
    "pydantic>=2.7",
    "cryptography>=42",
]

[project.optional-dependencies]
dev = [
    "pytest>=8.2",
    "pytest-asyncio>=0.23",
    "hypothesis>=6.100",
    "ruff>=0.5",
    "mypy>=1.10",
    # pyyaml  - Phase 4 scenario/prompt files. Kept OUT of runtime deps: the
    #           experiment harness is proof code, not product. Prompts live in
    #           YAML so adversarial text stays reviewable rather than
    #           JSON-escaped into illegibility.
    "pyyaml>=6",
]

# Real-LLM experiments only. Deliberately NOT in `dev`: neither the test suite nor
# CI may import it, so no code path can accidentally make a paid request.
llm = [
    "openai>=1.40",
]

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[tool.hatch.build.targets.wheel]
packages = ["src/fincore"]

[tool.pytest.ini_options]
asyncio_mode = "auto"
testpaths = ["tests"]
markers = [
    "contract: opt-in tests against real Razorpay test mode (requires RUN_RAZORPAY_TEST_CONTRACT=1)",
]
filterwarnings = ["error::DeprecationWarning"]

[tool.ruff]
line-length = 100
target-version = "py312"

[tool.ruff.lint]
select = ["E", "F", "I", "UP", "B", "SIM"]

[tool.mypy]
python_version = "3.12"
strict = true
warn_unreachable = true
plugins = []

[[tool.mypy.overrides]]
module = "tests.*"
strict = false

[tool.ruff.lint.per-file-ignores]
# experiments/b0/ is the EXACT script set that produced the real Razorpay Test Mode
# evidence in evidence/razorpay-test-mode/. It is preserved byte-identical to the
# version that ran, so the published evidence can be tied to the code that produced
# it. Restyling it would break that property for no correctness gain.
#
# B023 here is a verified false positive: the closure in exp_c() is consumed by
# .result() inside the same loop iteration, and the raw evidence confirms correct
# binding (three distinct per-trial key fingerprints and labels).
# experiments/mcpclient/mcpclient.py is the Phase 0 stdio client that drove
# Razorpay's official MCP server, preserved unmodified (see
# tests/test_mcp_stdio_conformance.py).
"experiments/mcpclient/*" = ["UP037"]
"experiments/b0/*" = ["I001", "UP031", "B023", "E501", "F541", "F841", "SIM102", "SIM105"]