Lukas
52a70c3eea
Issue #51: Enforce repository boundary at CI level using import-linter. Contract 'forbid_router_db_import' checks that app.routers never imports app.dependencies directly, keeping the DB access path through service contexts only. - Add import-linter>=2.0.0 to dev dependencies (backend/pyproject.toml) - Configure [tool.importlinter] with package_root and root_packages - Add [[tool.importlinter.contracts]] with type='forbidden', source app.routers, forbidden app.dependencies - Add 'Import Boundary' CI job (import-linter) - Document import-linter in CONTRIBUTING.md code quality table Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
78 lines
2.0 KiB
TOML
78 lines
2.0 KiB
TOML
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[project]
|
|
name = "bangui-backend"
|
|
version = "0.9.19"
|
|
description = "BanGUI backend — fail2ban web management interface"
|
|
requires-python = ">=3.12"
|
|
dependencies = [
|
|
"fastapi>=0.115.0",
|
|
"uvicorn[standard]>=0.32.0",
|
|
"pydantic>=2.9.0",
|
|
"pydantic-settings>=2.6.0",
|
|
"aiosqlite>=0.20.0",
|
|
"aiohttp>=3.11.0",
|
|
"apscheduler>=3.10,<4.0",
|
|
"structlog>=24.4.0",
|
|
"bcrypt>=4.2.0",
|
|
"geoip2>=4.8.0",
|
|
"prometheus-client>=0.21.0",
|
|
"regexploit>=1.0.0",
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
dev = [
|
|
"pytest>=8.3.0",
|
|
"pytest-asyncio>=0.24.0",
|
|
"httpx>=0.27.0",
|
|
"ruff>=0.8.0",
|
|
"mypy>=1.13.0",
|
|
"pytest-cov>=6.0.0",
|
|
"pytest-mock>=3.14.0",
|
|
"import-linter>=2.0.0",
|
|
]
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["app"]
|
|
|
|
[tool.ruff]
|
|
line-length = 120
|
|
target-version = "py312"
|
|
|
|
[tool.ruff.lint]
|
|
select = ["E", "F", "W", "I", "N", "UP", "B", "C4", "SIM", "TCH"]
|
|
ignore = ["B008"] # FastAPI uses function calls in default arguments (Depends)
|
|
|
|
[tool.ruff.lint.per-file-ignores]
|
|
# sys.path manipulation before stdlib imports is intentional in test helpers
|
|
# pytest evaluates fixture type annotations at runtime, so TC001/TC002/TC003 are false-positives
|
|
"tests/**" = ["E402", "TC001", "TC002", "TC003"]
|
|
"app/routers/**" = ["TC001", "TC002"] # FastAPI evaluates Depends() type aliases at runtime via get_type_hints()
|
|
|
|
[tool.ruff.format]
|
|
quote-style = "double"
|
|
|
|
[tool.mypy]
|
|
python_version = "3.12"
|
|
strict = true
|
|
plugins = ["pydantic.mypy"]
|
|
|
|
[tool.pytest.ini_options]
|
|
asyncio_mode = "auto"
|
|
pythonpath = [".", "../fail2ban-master"]
|
|
testpaths = ["tests"]
|
|
addopts = "--asyncio-mode=auto --cov=app --cov-report=term-missing"
|
|
filterwarnings = ["ignore::pytest.PytestRemovedIn9Warning"]
|
|
|
|
[tool.importlinter]
|
|
package_root = "app"
|
|
root_packages = ["app"]
|
|
|
|
[[tool.importlinter.contracts]]
|
|
name = "forbid_router_db_import"
|
|
type = "forbidden"
|
|
source_modules = ["app.routers"]
|
|
forbidden_modules = ["app.dependencies"]
|