pyproject.toml

[build-system]
requires = [
    "setuptools>=83.0.0; python_version >= '3.10'",
    "setuptools>=77.0,<83; python_version < '3.10'",
    "wheel",
]
build-backend = "setuptools.build_meta"

[project]
name = "flyto-core"
version = "2.27.0"
description = "The open-source execution engine for AI agents. 468 modules, MCP-native, triggers, queue, versioning, metering."
readme = "README.md"
license = "Apache-2.0"
license-files = ["LICENSE", "NOTICE"]
authors = [
    {name = "Flyto2 Team", email = "team@flyto2.com"}
]
maintainers = [
    {name = "Flyto2 Team", email = "team@flyto2.com"}
]
keywords = [
    "automation",
    "workflow",
    "mcp",
    "mcp-server",
    "ai-agents",
    "ai-agent-framework",
    "open-source-ai",
    "browser-automation",
    "web-scraping",
    "playwright",
    "rpa",
    "atomic-modules",
    "workflow-engine",
]
classifiers = [
    "Development Status :: 4 - Beta",
    "Intended Audience :: Developers",
    "Operating System :: OS Independent",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.9",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Topic :: Software Development :: Libraries :: Python Modules",
    "Topic :: Software Development :: Testing",
    "Topic :: Internet :: WWW/HTTP :: Browsers",
    "Topic :: Internet :: WWW/HTTP :: Dynamic Content",
    "Framework :: AsyncIO",
    "Framework :: Pydantic :: 2",
]
requires-python = ">=3.9"

dependencies = [
    "pyyaml>=6.0.3,<7",
    "aiohttp>=3.14.3,<4",
    "beautifulsoup4>=4.15.0,<5",
    "lxml>=6.1.1,<7",
    "pydantic>=2.13.4,<3",
    "python-dotenv>=1.2.2,<2",
    "aiofiles>=23.2.1,<25",
    "regex>=2024.4.16,<2027",  # GHSA-v468: interruptible matching (native timeout) for regex.* modules; stdlib re holds the GIL and cannot be timed out
]

[project.optional-dependencies]
browser = [
    "playwright>=1.40.0,<2",
]
api = [
    "fastapi>=0.139.0,<1",
    "starlette>=1.3.1,<2; python_version >= '3.10'",
    "starlette>=0.46.0,<1.3; python_version < '3.10'",
    "uvicorn>=0.52.0,<1",
]
vector = [
    "qdrant-client>=1.9.0,<2",
    "sentence-transformers>=2.7.0,<6",
    "requests>=2.34.2,<3",
]
image = [
    "qrcode[pil]>=7.0,<9",
    "Pillow>=11.3.0,<13",  # GHSA-3f63 (ACE, 10.2.0) + GHSA-44wm (buffer overflow, 10.3.0) fixed; 11.3.0 is the last line supporting py3.9 (12.2.0 CVEs require py3.10)
]
crypto = [
    "cryptography>=48.0.1,<49",
    "PyJWT>=2.13.0,<3",
]
dns = [
    "dnspython>=2.8.0,<3",
]
ai = [
    "openai>=1.109.1,<3",
]
telegram = [
    "python-telegram-bot>=22.8,<23",
]
jsast = [
    "tree-sitter>=0.26.0,<1",
    "tree-sitter-javascript>=0.23,<1",
    "jsbeautifier>=2.0.3,<3",
]
cloud = [
    "flyto-core[browser,image]",
]
all = [
    "flyto-core[browser,api,vector,telegram,image,crypto,dns,ai,jsast]",
]
dev = [
    "flyto-core[api]",
    "httpx2>=2.7.0,<3",
    "pytest>=8.4.2",  # GHSA-6w46 tmpdir (dev/local-only) fully patched in 9.0.3 / py3.10; 8.4.2 is the last line supporting py3.9
    "pytest-asyncio>=0.21.0",
    "pytest-cov>=4.1.0",
    "Pillow>=11.3.0",
    "cryptography>=48.0.1,<49",
    "PyJWT>=2.13.0,<3",
    "dnspython>=2.8.0,<3",
    "openai>=1.109.1,<3",
    "tree-sitter>=0.26.0,<1",
    "tree-sitter-javascript>=0.23,<1",
    "jsbeautifier>=2.0.3,<3",
    "black>=25.12.0",  # GHSA-fj7x ReDoS fixed in 24.3.0; keep the dev-tool floor current until the Python floor can move.
    "ruff>=0.1.0",
    "mypy>=1.20.2",
    "build>=1.5.0",
    "pip-tools>=7.5,<8",
    "pip-audit>=2.10.1,<3",
    "twine>=4.0.2",
]

[project.urls]
Homepage = "https://flyto2.com"
Documentation = "https://docs.flyto2.com"
Repository = "https://github.com/flytohub/flyto-core"
Issues = "https://github.com/flytohub/flyto-core/issues"
Changelog = "https://github.com/flytohub/flyto-core/blob/main/CHANGELOG.md"
Security = "https://github.com/flytohub/flyto-core/blob/main/SECURITY.md"
Blog = "https://blog.flyto2.com/posts/ai-workflow-automation-alternatives"
Examples = "https://docs.flyto2.com/guide/first-workflow"
Download = "https://flyto2.com/download.html"

[project.scripts]
flyto = "cli.main:main"
flyto-serve = "core.api:main"
flyto-verification = "core.verification_service:main"

# Entry points for plugin discovery
# Other packages can register modules by adding:
# [project.entry-points."flyto.modules"]
# my_modules = "my_package.modules:register_all"
[project.entry-points."flyto.modules"]
community = "core.modules.atomic:register_all"

[tool.setuptools]
package-dir = {"" = "src"}

[tool.setuptools.packages.find]
where = ["src"]

[tool.setuptools.package-data]
"*" = ["*.json", "*.yaml", "*.yml"]
# reverse.deobfuscate's Node.js sidecar worker (requires a separate `npm
# install` regardless — this only ships the worker source, not node_modules).
"core.modules.atomic.reverse" = [
    "deobfuscate_worker/package.json",
    "deobfuscate_worker/package-lock.json",
    "deobfuscate_worker/worker.mjs",
]
# testing.visual.compare's detachable TypeScript sidecar. node_modules stays
# excluded; installations remain explicit and reproducible from package-lock.
"core.modules.atomic.testing" = [
    "visual_worker/package.json",
    "visual_worker/package-lock.json",
    "visual_worker/tsconfig.json",
    "visual_worker/src/worker.ts",
]

[tool.black]
line-length = 100
target-version = ["py39", "py310", "py311", "py312"]

[tool.ruff]
line-length = 100
target-version = "py310"

[tool.ruff.lint]
select = ["E", "F", "W", "I", "N", "B", "A", "C4", "SIM"]
ignore = ["E501"]

[tool.pytest.ini_options]
asyncio_mode = "auto"
testpaths = ["tests"]
python_files = ["test_*.py"]
python_functions = ["test_*"]
addopts = "--cov=core --cov-report=term-missing --cov-fail-under=60"
markers = [
    "browser: real browser tests that require Playwright browser support",
    "e2e: cross-component integration tests with real workflow boundaries",
]

[tool.mypy]
python_version = "3.9"
warn_return_any = true
warn_unused_configs = true
warn_redundant_casts = true
warn_unused_ignores = true
disallow_untyped_defs = false  # Too strict for now
disallow_incomplete_defs = true
check_untyped_defs = true
no_implicit_optional = true
warn_no_return = true
ignore_missing_imports = true

# Per-module overrides for strict checking on quality subsystem
[[tool.mypy.overrides]]
module = "core.modules.quality.*"
disallow_untyped_defs = true
strict = true