pyproject.toml

[build-system]
requires = ["setuptools>=61"]
build-backend = "setuptools.build_meta"

[project]
name = "coderifts-sdk"
version = "3.8.2"
description = "Signed, offline-verifiable authorization for AI-agent contract changes. Only a granted change can proceed."
readme = "README.md"
license = { text = "MIT" }
authors = [{ name = "CodeRifts", email = "hello@coderifts.com" }]
keywords = ["coderifts", "api", "governance", "openapi", "agents", "mcp"]
requires-python = ">=3.9"
dependencies = [
    "requests>=2.28.0,<3.0.0",
]
classifiers = [
    "Development Status :: 5 - Production/Stable",
    "Intended Audience :: Developers",
    "License :: OSI Approved :: MIT License",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.9",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Software Development :: Libraries :: Python Modules",
]

[project.urls]
Homepage = "https://coderifts.com"
Documentation = "https://coderifts.com/docs"
Repository = "https://github.com/coderifts/python-sdk"

[project.optional-dependencies]
# Measured 2026-09-06 against tests/: the only third-party import is `pytest`
# (test_canonical_request_parity.py). unittest / unittest.mock / json / os /
# pathlib / ast / inspect are stdlib. `requests` is a runtime dependency.
test = ["pytest>=7"]
# ── THE SIGNATURE PATH IS AN EXTRA, ON PURPOSE ──────────────────────────────────────────────
#
# `pip install coderifts-sdk` stays requests-only — that install works on hosts that cannot build
# a wheel, and most callers here talk to the API and never verify anything.
# `pip install 'coderifts-sdk[verify]'` adds full local Ed25519 (coderifts.verify_receipt).
#
# `cryptography` over `pynacl`, measured: coderifts-verifier — this ecosystem's dedicated Python
# verifier — already depends on cryptography>=41, and choosing pynacl here would put ONE receipt
# format behind TWO crypto stacks inside one ecosystem. pynacl is the thinner binding and that is
# a real advantage; it is not worth splitting the ecosystem's crypto for.
verify = ["cryptography>=41"]

[tool.pytest.ini_options]
testpaths = ["tests"]

[tool.setuptools.packages.find]
include = ["coderifts*"]