d79f17b3bb
Initial project structure for neuronetz-gateway per scope-docs/SPEC.md: - Python 3.12 / FastAPI / SQLAlchemy 2.0 (async) / Redis / Postgres stack managed by uv. Multi-stage non-root Dockerfile, prod + dev compose files (ollama service is NEVER published in either), Caddyfile + systemd unit, justfile, GitHub Actions CI (ruff, mypy --strict, pytest, bandit, pip-audit). - Pydantic-Settings config covering every env var from SPEC §7, including the MODEL_DISCOVERY_* keys for the dynamic-discovery feature (§4.6). - Alembic 0001_initial creates the full gateway schema (8 tables, 3 enums, notify_key_revoked() trigger), incl. allow_all_models on tenant_limits and key_limits for the per-tenant auto-grant toggle. - Working /healthz, /readyz (fail-closed when deps unreachable), and a Prometheus /metrics stub. Sanitizing error handlers that attach X-Request-ID to every response and never leak upstream internals. - SPEC + AGENT_PROMPT included under scope-docs/ (source of truth).
95 lines
2.2 KiB
TOML
95 lines
2.2 KiB
TOML
[project]
|
|
name = "neuronetz-gateway"
|
|
version = "0.1.0"
|
|
description = "Secure multi-tenant API gateway in front of Ollama for the Neuronetz platform."
|
|
readme = "README.md"
|
|
license = { text = "Apache-2.0" }
|
|
requires-python = ">=3.12"
|
|
authors = [{ name = "Neuronetz", email = "ops@neuronetz.ai" }]
|
|
dependencies = [
|
|
"fastapi>=0.115",
|
|
"uvicorn[standard]>=0.30",
|
|
"httpx>=0.27",
|
|
"sqlalchemy[asyncio]>=2.0",
|
|
"asyncpg>=0.29",
|
|
"redis[hiredis]>=5.0",
|
|
"structlog>=24.1",
|
|
"pydantic>=2.9",
|
|
"pydantic-settings>=2.4",
|
|
"argon2-cffi>=23.1",
|
|
"typer>=0.12",
|
|
"prometheus-client>=0.20",
|
|
"alembic>=1.13",
|
|
]
|
|
|
|
[project.scripts]
|
|
neuronetz-gateway = "neuronetz_gateway.cli.manage:app"
|
|
|
|
[project.optional-dependencies]
|
|
dev = [
|
|
"ruff>=0.6",
|
|
"mypy>=1.11",
|
|
"bandit>=1.7",
|
|
"pip-audit>=2.7",
|
|
"pytest>=8.3",
|
|
"pytest-asyncio>=0.24",
|
|
"pytest-cov>=5.0",
|
|
"testcontainers>=4.8",
|
|
"respx>=0.21",
|
|
"locust>=2.31",
|
|
]
|
|
|
|
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["src/neuronetz_gateway"]
|
|
|
|
[tool.ruff]
|
|
target-version = "py312"
|
|
line-length = 100
|
|
src = ["src", "tests"]
|
|
|
|
[tool.ruff.lint]
|
|
select = ["E", "F", "I", "B", "UP", "S", "ASYNC"]
|
|
|
|
[tool.ruff.lint.per-file-ignores]
|
|
# Tests may use assert and bind to all interfaces in fixtures.
|
|
"tests/**" = ["S101", "S104"]
|
|
|
|
[tool.mypy]
|
|
python_version = "3.12"
|
|
strict = true
|
|
mypy_path = "src"
|
|
plugins = ["pydantic.mypy"]
|
|
namespace_packages = true
|
|
explicit_package_bases = true
|
|
|
|
[[tool.mypy.overrides]]
|
|
# argon2 ships types but some transitive deps may not; keep strictness elsewhere.
|
|
# asyncpg ships no stubs/py.typed marker; it is used in revocation.py only.
|
|
module = ["testcontainers.*", "locust.*", "asyncpg", "asyncpg.*"]
|
|
ignore_missing_imports = true
|
|
|
|
[tool.pytest.ini_options]
|
|
asyncio_mode = "auto"
|
|
testpaths = ["tests"]
|
|
pythonpath = ["src"]
|
|
addopts = "--cov=neuronetz_gateway --cov-report=term-missing"
|
|
|
|
[tool.coverage.run]
|
|
source = ["src/neuronetz_gateway"]
|
|
branch = true
|
|
omit = [
|
|
"src/neuronetz_gateway/__main__.py",
|
|
"src/neuronetz_gateway/cli/*",
|
|
]
|
|
|
|
[tool.coverage.report]
|
|
# Phase 1: coverage is reported but non-blocking. Later phases set fail_under.
|
|
show_missing = true
|
|
|
|
[tool.bandit]
|
|
exclude_dirs = ["tests"]
|