pyproject.toml

[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "fhir-scorecard"
version = "0.1.0"
description = "Plain-language operational scorecard for publicly observable FHIR endpoints"
readme = "README.md"
requires-python = ">=3.12"
license = { text = "Apache-2.0" }
authors = [{ name = "Chelsea Kelly-Reif" }]
dependencies = []

# AI narration outside the graded path (ADR 0003): the public Anthropic SDK only. Nothing in
# grading, the report, the site, the Action, or the MCP server's existing tools imports it.
[project.optional-dependencies]
ai = ["anthropic[bedrock]>=0.125"]

# PEP 735 dependency group rather than an optional-dependencies extra, so the linters and
# type-checker are never installable as `fhir-scorecard[dev]` from a wheel. There are no
# runtime dependencies, so this group is the whole dependency surface `make audit` scans.
[dependency-groups]
dev = [
  "pytest>=8",
  "pytest-cov>=5",
  "hypothesis>=6",
  "mypy>=1.18",
  "pip-audit>=2.10",
  "ruff>=0.15",
]

[project.scripts]
fhir-scorecard = "fhir_scorecard.cli:main"

[tool.hatch.build.targets.wheel]
packages = ["src/fhir_scorecard"]

[tool.mypy]
strict = true
python_version = "3.12"
# `action` ships to a consumer's runner inside the composite Action, so it is source, not
# scaffolding. It was outside this list and outside `make lint`, which is why both gates could
# report success over it. See the comment on `lint` in the Makefile.
files = ["src", "action", "tools"]

[tool.ruff]
line-length = 100
target-version = "py312"

[tool.ruff.lint]
# The portfolio standard's pinned select set (CODE-QUALITY-STANDARD.md section 2). E501 is
# ignored there and here because `ruff format` owns line length and cannot split a string
# literal; `make format` is what enforces the 100 columns, and it is a gate.
select = ["E", "W", "F", "I", "UP", "B", "SIM", "S", "C90", "RUF"]
ignore = ["E501"]

[tool.ruff.lint.mccabe]
max-complexity = 10

[tool.ruff.lint.per-file-ignores]
"tests/*" = ["S101"]

[tool.pytest.ini_options]
testpaths = ["tests"]
addopts = "--strict-markers"

[tool.coverage.run]
branch = true
source = ["src/fhir_scorecard"]

[tool.coverage.report]
# CODE-QUALITY-STANDARD §2 sets the apps/services/CLIs minimum at >=85%. That is the
# standard's minimum, not this repo's floor. The suite measures 98.50% branch coverage
# over 607 tests (2026-08-29, `uv sync --locked --all-extras`), so a floor of 85 left
# 13.5 points in which untested code could enter the tree and still leave the build
# green. The gate now sits a few points under what is measured: enough slack that an
# unrelated change does not fail the build, not enough to hide a real loss of covered
# code. `src/fhir_scorecard/ai/provider.py` is the lowest module at 79% and is the one
# to watch if this floor ever starts binding.
fail_under = 95
show_missing = true