srr84/agent-data-layer

1[build-system]2requires = ["setuptools>=68"]3build-backend = "setuptools.build_meta"4 5[project]6name = "agent-data-layer"7version = "0.0.0"8description = "Agent-Readable Data Layer POC — M0 contracts spine (typed interfaces + matches() leaf)."9requires-python = ">=3.12"10# Runtime deps are pinned in requirements.txt (reproducible toolchain for M0).11dependencies = [12    "pydantic==2.9.2",13    "pydantic-settings==2.5.2",14]15 16[tool.setuptools.packages.find]17where = ["src"]18 19[tool.mypy]20python_version = "3.12"21strict = true22files = ["src", "tests"]23# WHY: pydantic v2 ships its own mypy plugin; needed for accurate model field typing.24plugins = ["pydantic.mypy"]25warn_unused_configs = true26warn_redundant_casts = true27warn_unused_ignores = true28no_implicit_reexport = false29 30[tool.pydantic-mypy]31init_typed = true32warn_required_dynamic_aliases = true33 34[tool.pytest.ini_options]35minversion = "7.0"36testpaths = ["tests"]37addopts = "-ra"38pythonpath = ["src"]39 40[tool.bandit]41# Security scan config for the CI security stage (TechSpec §8). The scan runs over src/.42# Two test IDs are skipped with documented justification — each is a verified non-issue, NOT a43# weakening of the scan (every other check stays on; the rest of src/ is fully scanned):44#   B311 (non-crypto random): data_generator uses random.Random(seed) to synthesize the OFFLINE45#         fixture deterministically — no security/randomness requirement; crypto is irrelevant here.46#   B310 (urllib urlopen scheme): local_model_adapter POSTs to the CONFIGURED OpenAI-compatible47#         model endpoint (MODEL_BASE_URL); the URL is a typed Settings field, not attacker input,48#         and the call is the model transport itself. The B104 all-interfaces bind in app/server.py49#         is suppressed inline (# nosec B104) because the container MUST bind the platform port.50skips = ["B311", "B310"]51