pyproject.toml

[build-system]
requires = ["setuptools>=61.0"]
build-backend = "setuptools.build_meta"

[project]
name = "muxi-runtime"
dynamic = ["version"]  # Version is read from src/muxi/runtime/.version file
authors = [
  {name = "MUXI Team", email = "dev@muxi.org"},
]
description = "Production-ready runtime for building and orchestrating intelligent multi-agent AI systems"
readme = "README.md"
license = {text = "Elastic License 2.0"}
requires-python = ">=3.10"
keywords = [
    "ai", "agents", "llm", "multi-agent", "orchestration", "mcp",
    "onellm", "formation", "runtime", "framework", "chatgpt",
    "openai", "anthropic", "agent-framework", "ai-agents",
    "agent-orchestration", "llm-framework", "ai-system"
]
classifiers = [
    "Development Status :: 5 - Production/Stable",
    "Intended Audience :: Developers",
    "Topic :: Software Development :: Libraries :: Application Frameworks",
    "Topic :: Scientific/Engineering :: Artificial Intelligence",
    "Topic :: Software Development :: Libraries :: Python Modules",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "License :: Other/Proprietary License",
    "Operating System :: OS Independent",
    "Operating System :: POSIX :: Linux",
    "Operating System :: MacOS :: MacOS X",
    "Operating System :: Microsoft :: Windows",
    "Framework :: AsyncIO",
    "Framework :: FastAPI",
    "Typing :: Typed",
]
dependencies = [
    # Build dependencies for setup.py
    "tomli>=1.2.0;python_version<'3.11'",  # For reading pyproject.toml in setup.py

    # Core dependencies
    "orjson>=3.9.0",
    "pyyaml>=6.0",
    "pydantic>=2.0.0",
    "httpx>=0.24.0",
    "anyio>=3.7.0",
    "python-dotenv>=1.0.0",
    "websockets>=11.0.3",
    "httpx-sse>=0.4.0",
    "rich>=13.6.0",
    "colorama>=0.4.6",
    "psutil>=5.9.0",  # System and process utilities

    # MCP Package
    "mcp>=1.23.0",  # Required for Streamable HTTP transport support (security fix)
    "fastmcp>=3.0.0",  # MCP server generation from FastAPI app

    # File processing and utilities
    "aiofiles>=23.2.0",
    "python-magic>=0.4.27",

    # Document processing dependencies
    "markitdown[all]>=0.1.0",  # Convert various file formats to Markdown
    "pypdf>=6.9.1",  # PDF document processing (successor to PyPDF2); CVE-2026-33123 fixed in 6.9.1
    "python-docx>=1.1.0",  # Word document processing
    "markdownify>=0.11.6",  # HTML to Markdown conversion
    "beautifulsoup4>=4.12.0",  # HTML parsing and validation
    "nltk>=3.8.0",  # Natural language processing for chunking
    "spacy>=3.8.0",  # Advanced NLP for semantic chunking (compatible with NumPy 2.x)
    "sentence-transformers>=2.2.0",  # Embedding generation for semantic search

    # Image processing dependencies
    "Pillow>=10.0.0",  # PIL/Pillow for image processing
    "pdf2image>=1.16.0",  # Convert PDF pages to images (requires Poppler)

    # LLM Package
    "onellm[cache]>=0.20260130.0",
    "boto3>=1.26.0",  # AWS SDK for OneLLM Bedrock provider
    "google-cloud-aiplatform>=1.25.0",  # Google Cloud for OneLLM Vertex AI provider

    # A2A (Agent-to-Agent) Communication
    "a2a-sdk>=0.3",  # Google's Agent-to-Agent SDK for inter-agent communication


    # Server components
    "fastapi>=0.108.0",
    "uvicorn>=0.24.0",
    "starlette>=0.49.1",  # Security fix for Range header DoS

    # Vector search
    "faiss-cpu>=1.13.0",  # 1.13+ fixes numpy deprecation warning
    "faissx>=0.0.3",  # Distributed FAISS for remote vector operations
    "pgvector>=0.3.6",
    "numpy>=1.24.0",
    "sqlite-vec>=0.1.6",  # SQLite vector extension for similarity search

    # Database
    "psycopg2-binary>=2.9.9",
    "asyncpg>=0.29.0",  # Async PostgreSQL driver for SQLAlchemy (required for persistent memory)
    "SQLAlchemy[asyncio]>=2.0.17",
    "aiosqlite>=0.19.0",  # Async SQLite driver for SQLAlchemy (required for default persistent memory)

    # Legacy dependencies (keeping for compatibility)
    "aiohttp>=3.13.3",  # Security fixes for DoS vulnerabilities
    "click>=8.1.0",
    "openai>=1.3.0",

    # File generation dependencies (now core requirements)
    # Data processing and analysis
    "pandas>=2.0.0",
    "scipy>=1.10.0",
    "statsmodels>=0.14.0",

    # Visualization
    "matplotlib>=3.7.0",
    "seaborn>=0.12.0",
    "plotly>=5.15.0",
    "bokeh>=3.8.2",  # Security fix for WebSocket origin validation
    "altair>=5.0.0",

    # Document generation
    "reportlab>=4.0.0",
    "fpdf2>=2.7.0",

    # Spreadsheet handling
    "openpyxl>=3.1.0",
    "xlsxwriter>=3.1.0",
    "xlrd>=2.0.0",
    "xlwt>=1.3.0",

    # Image processing (Pillow already included above)
    "qrcode>=7.4.0",
    "python-barcode>=0.15.0",

    # Presentation
    "python-pptx>=0.6.21",

    # File formats
    "lxml>=4.9.0",

    # Additional dependencies found in codebase
    "cachetools>=5.3.0",  # Caching for credential resolution (TTL, LRU)
    "croniter>=1.3.0",  # Cron expression parsing for scheduler
    "cryptography>=41.0.0",  # Encryption for secrets manager
    "PyJWT>=2.12.0",  # CVE-2026-32597: accepts unknown crit headers; fixed in 2.12.0
    "pyasn1>=0.6.3",  # CVE-2026-30922: unbounded recursion DoS; fixed in 0.6.3
    "msgpack>=1.0.0",  # Message pack format for observability
    "multitasking>=0.0.11",  # Multi-threading utilities
    "nanoid>=2.0.0",  # Nano ID generation
    "pytz>=2023.3",  # Timezone support for scheduler
    "requests>=2.31.0",  # HTTP client (used in observability)
    "typing-extensions>=4.8.0",  # Backport of typing features
    "pyzmq>=25.0.0",  # ZeroMQ for observability streaming
]

[project.optional-dependencies]
kafka = [
    "kafka-python>=2.0.0",  # Kafka streaming support for observability
]
dev = [
    "pytest>=7.0.0",
    "pytest-asyncio>=0.21.0",
    "pytest-cov>=4.0.0",
    "black>=23.0.0",
    "isort>=5.12.0",
    "mypy>=1.0.0",
    "ruff>=0.1.0",
    "flake8>=6.0.0",
    "pyright>=1.1.0",
]

[project.urls]
"Homepage" = "https://muxi.org"
"Documentation" = "https://muxi.org/docs"
"Source Code" = "https://github.com/muxi-ai/runtime"
"Bug Tracker" = "https://github.com/muxi-ai/runtime/issues"
"Discussions" = "https://muxi.org/community"
"Changelog" = "https://github.com/muxi-ai/runtime/blob/main/CHANGELOG.md"
"Funding" = "https://github.com/sponsors/muxi-ai"
"Download" = "https://pypi.org/project/muxi/"


[tool.setuptools.dynamic]
version = {file = "src/muxi/runtime/.version"}

[tool.setuptools.packages.find]
where = ["src"]

[tool.black]
line-length = 100
target-version = ["py310", "py311", "py312", "py313"]
include = '\.pyi?$'
exclude = '''
/(
    \.git
  | \.hg
  | \.mypy_cache
  | \.tox
  | \.venv
  | _build
  | build
  | dist
)/
'''

[tool.isort]
profile = "black"
line_length = 100

[tool.mypy]
python_version = "3.10"
warn_return_any = true
warn_unused_configs = true
disallow_untyped_defs = true
disallow_incomplete_defs = true
check_untyped_defs = true
disallow_untyped_decorators = true
no_implicit_optional = true
warn_redundant_casts = true
warn_unused_ignores = true
warn_no_return = true
warn_unreachable = true
strict_optional = true

[tool.ruff]
target-version = "py310"
line-length = 100
src = ["src", "tests"]
exclude = [
    ".git",
    ".venv",
    "__pycache__",
    "build",
    "dist",
    "*.egg-info",
]

[tool.ruff.lint]
select = [
    "E",      # pycodestyle errors
    "W",      # pycodestyle warnings
    "F",      # pyflakes
    "I",      # isort
    "B",      # flake8-bugbear
    "C4",     # flake8-comprehensions
]
ignore = [
    "E501",   # line too long (handled by formatter)
    "B007",   # unused loop variable (use _var convention later)
    "B008",   # function call in default argument (common in FastAPI)
    "B019",   # lru_cache on methods (known pattern in codebase)
    "B023",   # function binding loop variable (complex to fix)
    "B026",   # star-arg unpacking (existing pattern)
    "B028",   # no stacklevel in warnings (low priority)
    "B034",   # re.sub keyword args (existing pattern)
    "B904",   # raise without from (too noisy)
    "B905",   # zip without strict (python 3.10+ feature)
    "C400",   # unnecessary generator (style preference)
    "C401",   # unnecessary generator for set (style preference)
    "C403",   # list comprehension to set (style preference)
    "C414",   # unnecessary list in sorted (style preference)
    "C416",   # unnecessary comprehension (style preference)
    "C420",   # dict.fromkeys (style preference)
]

[tool.ruff.lint.isort]
known-first-party = ["muxi"]

[tool.ruff.format]
quote-style = "double"
indent-style = "space"
skip-magic-trailing-comma = false