pyproject.toml

[build-system]
requires = ["setuptools>=68", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "zero-agent"
version = "0.1.0a0"
description = "Self-hosted Telegram AI companion and administration console"
readme = "README.md"
requires-python = ">=3.11"
# Keep this list byte-for-byte equivalent to the runtime pins in
# requirements.txt. They are two views of one dependency set: requirements.txt
# feeds requirements.lock and every install path, while this list is the
# metadata a wheel consumer resolves against. tests/test_release_artifacts.py
# fails the build when they diverge -- an earlier drift here silently installed
# aiohttp 3.10.11 (below the documented PYSEC floor) and omitted tzdata, which
# breaks zoneinfo timezone validation on Windows.
dependencies = [
  "telethon==1.44.0",
  "aiogram==3.30.0",
  "aiohttp>=3.13.4,<3.15",
  "PyYAML==6.0.2",
  "aiosqlite==0.20.0",
  "pydantic==2.9.2",
  "python-dotenv==1.2.3",
  "tzdata>=2024.1",
]

[project.optional-dependencies]
dev = [
  "pytest>=9.0.3,<10",
  "pytest-asyncio>=1.4,<2",
]

[project.scripts]
zero = "zero.cli:main"

[tool.setuptools.packages.find]
include = ["zero*", "scripts*"]
exclude = ["tests*", "panel*", "config*", "runtime*"]

# pytest configuration lives in pytest.ini, which is the only file pytest reads
# here: its discovery order puts pytest.ini ahead of pyproject.toml and stops at
# the first file that yields configuration. A [tool.pytest.ini_options] block in
# this file would be silently ignored, so it is deliberately absent.

[tool.ruff]
target-version = "py311"
line-length = 200
extend-exclude = ["panel"]

[tool.ruff.lint]
# Scoped to defects rather than style. Much of the runtime predates this
# transformation and is written in a dense single-line idiom; reformatting it
# wholesale would produce a large untestable diff and bury real regressions.
# These rules catch things that are wrong, not things that are unfamiliar:
#   E9  syntax and IO errors
#   F   pyflakes - undefined names, unused imports, duplicate keys, dead locals
#   B   bugbear - mutable defaults, unused loop vars, except-clause mistakes
#   S   bandit subset - insecure calls
# The style-only families (E1/E2/E3/E5, W, I, N, UP) stay off until the legacy
# modules are reformatted deliberately in their own change.
select = ["E9", "F821", "F811", "F601", "F602", "B002", "B006", "B018", "S102", "S307", "S602"]

[tool.ruff.lint.per-file-ignores]
# Tests deliberately construct malformed input and rebind fixtures.
"tests/*" = ["S102", "B018"]