[build-system]
build-backend = "setuptools.build_meta"
requires = ["setuptools>=61.0", "wheel"]

[dependency-groups]
dev = [
  "bandit==1.8.3",
  "coverage==7.15.2",
  "pytest==9.0.3",
  "pytest-asyncio==1.4.0",
  "pytest-cov==6.0.0",
  "pytest-env==1.1.5",
  "ruff==0.15.11",
  "vulture==2.14"
]

[project]
dependencies = [
  "fastmcp==3.4.5",
  "httpx==0.28.1"
]
description = "MCP server for Prowler ecosystem"
name = "prowler-mcp"
readme = "README.md"
requires-python = ">=3.12"
version = "0.9.0"

[project.scripts]
prowler-mcp = "prowler_mcp_server.main:main"

[tool.pytest]

[tool.pytest.ini_options]
addopts = "--strict-markers --strict-config"
# `asyncio_mode = "auto"` lets `async def test_*` run without a per-test marker;
# the server is async end to end, so requiring one would be pure noise. Setting
# the fixture loop scope explicitly silences a pytest-asyncio deprecation warning.
asyncio_default_fixture_loop_scope = "function"
asyncio_mode = "auto"
filterwarnings = [
  "error",
  # Starlette's TestClient warns that it will require httpx2. The httpx pin is a
  # deliberate project-wide choice, so this stays allowed until that pin moves.
  "default::starlette.exceptions.StarletteDeprecationWarning"
]
pythonpath = ["."]
testpaths = ["tests"]

# Applied before any conftest or test module is imported, which is what makes it
# work: `prowler_app/server.py` builds every tool at import time, and a tool whose
# construction raises (as it does without an API key) is swallowed by
# `load_all_tools`, leaving the `prowler_*` namespace silently empty. Pinning a
# fake key here keeps the full tool surface loadable and stops a developer's
# `mcp_server/.env` from reaching the suite.
[tool.pytest_env]
API_BASE_URL = "https://api.testing.invalid/api/v1"
PROWLER_API_KEY = "pk_fake_api_key_for_unit_testing_only"
PROWLER_MCP_TRANSPORT_MODE = "stdio"

# Shared ruff baseline (kept in sync with api/pyproject.toml).
# target-version tracks this project's lowest supported Python.
[tool.ruff]
target-version = "py312"

[tool.ruff.lint]
# Defaults (E4/E7/E9, F) plus import sorting, modern-syntax upgrades, and
# comprehension lints — all mechanically auto-fixable. flake8-bugbear (B) is a
# good next step but needs manual cleanup, so it is left out of the shared
# baseline for now.
extend-select = [
  "I",  # isort — import ordering
  "UP",  # pyupgrade — modern syntax for the min supported Python
  "C4"  # flake8-comprehensions
]

[tool.uv]
package = true

# Transitive pins fastmcp does not raise on its own; each carries a known HIGH.
constraint-dependencies = [
  "cryptography==50.0.0",
  "joserfc==1.6.8",
  "mcp==1.28.1",
  "python-multipart==0.0.30"
]