chore: bootstrap repo tooling, dependency and quality gates
uv-managed PEP 621 project with ruff, mypy (strict on packages/domain and packages/llm), pytest with coverage, and import-linter contracts that mechanically enforce the dependency rules of 架构文档 §4.2 -- including the two forbidden edges (compliance and identity must not depend on business domains). CI, pre-commit and a detect-secrets baseline gate every push; .env is gitignored before anything is ever staged.
This commit is contained in:
Executable
+279
@@ -0,0 +1,279 @@
|
||||
[build-system]
|
||||
requires = ["hatchling"]
|
||||
build-backend = "hatchling.build"
|
||||
|
||||
[project]
|
||||
name = "meida-backend"
|
||||
version = "0.1.0"
|
||||
description = "美搭 (Meida) backend — AI fashion & styling assistant for HarmonyOS"
|
||||
readme = "README.md"
|
||||
requires-python = ">=3.12,<3.13"
|
||||
license = { text = "Proprietary" }
|
||||
|
||||
dependencies = [
|
||||
"fastapi>=0.115",
|
||||
"uvicorn[standard]>=0.30",
|
||||
"gunicorn>=22.0",
|
||||
"sqlalchemy[asyncio]>=2.0",
|
||||
"asyncpg>=0.29",
|
||||
"alembic>=1.13",
|
||||
"pydantic>=2.7",
|
||||
"pydantic-settings>=2.3",
|
||||
"celery[redis]>=5.4",
|
||||
"redis>=5.0",
|
||||
"httpx>=0.27",
|
||||
"structlog>=24.1",
|
||||
"opentelemetry-api>=1.25",
|
||||
"opentelemetry-sdk>=1.25",
|
||||
"opentelemetry-instrumentation-fastapi>=0.46b0",
|
||||
"opentelemetry-exporter-otlp-proto-http>=1.25",
|
||||
"prometheus-client>=0.20",
|
||||
"pgvector>=0.2.5",
|
||||
"tenacity>=8.3",
|
||||
"pyjwt[crypto]>=2.8",
|
||||
"passlib[bcrypt]>=1.7.4",
|
||||
]
|
||||
|
||||
[project.optional-dependencies]
|
||||
dev = [
|
||||
"ruff>=0.6",
|
||||
"mypy>=1.11",
|
||||
"pytest>=8.3",
|
||||
"pytest-asyncio>=0.24",
|
||||
"pytest-cov>=5.0",
|
||||
"import-linter>=2.0",
|
||||
"pre-commit>=3.8",
|
||||
"detect-secrets>=1.5",
|
||||
"testcontainers[postgres,redis]>=4.8",
|
||||
"types-passlib>=1.7",
|
||||
]
|
||||
|
||||
[tool.hatch.build.targets.wheel]
|
||||
packages = ["apps", "packages", "services"]
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# ruff — lint + format (架构文档 §16.2 静态检查防线)
|
||||
# ---------------------------------------------------------------------------
|
||||
[tool.ruff]
|
||||
target-version = "py312"
|
||||
line-length = 100
|
||||
src = ["."]
|
||||
extend-exclude = ["migrations/versions"]
|
||||
|
||||
[tool.ruff.lint]
|
||||
select = [
|
||||
"E", "W", # pycodestyle
|
||||
"F", # pyflakes
|
||||
"I", # isort
|
||||
"N", # pep8-naming
|
||||
"UP", # pyupgrade
|
||||
"B", # bugbear
|
||||
"C4", # comprehensions
|
||||
"SIM", # simplify
|
||||
"ASYNC", # async correctness
|
||||
"S", # bandit (security)
|
||||
"T20", # no print
|
||||
"RUF",
|
||||
]
|
||||
ignore = [
|
||||
"S101", # assert is fine (pytest)
|
||||
"B008", # FastAPI Depends() in defaults is idiomatic
|
||||
# 本项目面向中文用户，注释/文案/提示词大量使用全角标点。
|
||||
# RUF001-003 会把每一个中文标点都报成 "ambiguous unicode"，无信号价值。
|
||||
"RUF001",
|
||||
"RUF002",
|
||||
"RUF003",
|
||||
]
|
||||
|
||||
[tool.ruff.lint.per-file-ignores]
|
||||
"tests/**" = ["S105", "S106", "S311"]
|
||||
"migrations/**" = ["E501"]
|
||||
|
||||
[tool.ruff.lint.isort]
|
||||
known-first-party = ["apps", "packages", "services"]
|
||||
|
||||
[tool.ruff.format]
|
||||
quote-style = "double"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# mypy — strict 仅覆盖 packages/domain 与 packages/llm (架构文档 §16.2)
|
||||
# ---------------------------------------------------------------------------
|
||||
[tool.mypy]
|
||||
python_version = "3.12"
|
||||
plugins = ["pydantic.mypy"]
|
||||
ignore_missing_imports = true
|
||||
warn_unused_configs = true
|
||||
warn_redundant_casts = true
|
||||
show_error_codes = true
|
||||
namespace_packages = true
|
||||
explicit_package_bases = true
|
||||
exclude = ["migrations/versions/"]
|
||||
|
||||
[[tool.mypy.overrides]]
|
||||
module = ["packages.domain.*", "packages.llm.*"]
|
||||
disallow_untyped_defs = true
|
||||
disallow_incomplete_defs = true
|
||||
disallow_untyped_calls = true
|
||||
disallow_untyped_decorators = true
|
||||
disallow_any_generics = true
|
||||
disallow_subclassing_any = true
|
||||
check_untyped_defs = true
|
||||
no_implicit_reexport = true
|
||||
warn_return_any = true
|
||||
warn_unused_ignores = true
|
||||
strict_equality = true
|
||||
extra_checks = true
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# pytest
|
||||
# ---------------------------------------------------------------------------
|
||||
[tool.pytest.ini_options]
|
||||
minversion = "8.0"
|
||||
testpaths = ["tests"]
|
||||
asyncio_mode = "auto"
|
||||
asyncio_default_fixture_loop_scope = "function"
|
||||
addopts = [
|
||||
"-ra",
|
||||
"--strict-markers",
|
||||
"--cov=packages.llm",
|
||||
"--cov=packages.domain",
|
||||
"--cov-report=term-missing",
|
||||
"--cov-fail-under=80",
|
||||
]
|
||||
markers = [
|
||||
"integration: needs PostgreSQL/Redis (docker compose or testcontainers)",
|
||||
"golden: golden-set regression (retrieval / rules / report)",
|
||||
]
|
||||
|
||||
[tool.coverage.report]
|
||||
exclude_lines = [
|
||||
"pragma: no cover",
|
||||
"if TYPE_CHECKING:",
|
||||
"raise NotImplementedError",
|
||||
"\\.\\.\\.",
|
||||
]
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# import-linter — 机器化执行架构文档 §4.2 的依赖规则
|
||||
# CI 失败即阻断合并 (§16.2 分层依赖检查)
|
||||
# ---------------------------------------------------------------------------
|
||||
[tool.importlinter]
|
||||
root_packages = ["apps", "packages", "services"]
|
||||
include_external_packages = true
|
||||
|
||||
# --- §16.1: packages/domain 是纯逻辑层，不依赖 FastAPI / DB / HTTP / 队列 ---
|
||||
[[tool.importlinter.contracts]]
|
||||
name = "packages.domain is pure (no IO, no framework)"
|
||||
type = "forbidden"
|
||||
source_modules = ["packages.domain"]
|
||||
forbidden_modules = [
|
||||
"fastapi",
|
||||
"starlette",
|
||||
"sqlalchemy",
|
||||
"alembic",
|
||||
"asyncpg",
|
||||
"httpx",
|
||||
"redis",
|
||||
"celery",
|
||||
"packages.shared",
|
||||
"packages.llm",
|
||||
"apps",
|
||||
"services",
|
||||
]
|
||||
|
||||
# --- §4.2 禁止的依赖 (1): compliance 不得反向依赖任何业务域 ---
|
||||
[[tool.importlinter.contracts]]
|
||||
name = "compliance must not depend on any business domain"
|
||||
type = "forbidden"
|
||||
source_modules = ["packages.compliance"]
|
||||
forbidden_modules = [
|
||||
"packages.identity",
|
||||
"packages.profile",
|
||||
"packages.report",
|
||||
"packages.agent",
|
||||
"packages.tryon",
|
||||
"packages.kb",
|
||||
"packages.billing",
|
||||
"packages.task",
|
||||
"packages.notify",
|
||||
"packages.wardrobe",
|
||||
]
|
||||
|
||||
# --- §4.2 禁止的依赖 (2): identity 不得依赖其他业务域 ---
|
||||
[[tool.importlinter.contracts]]
|
||||
name = "identity must not depend on any other business domain"
|
||||
type = "forbidden"
|
||||
source_modules = ["packages.identity"]
|
||||
forbidden_modules = [
|
||||
"packages.profile",
|
||||
"packages.report",
|
||||
"packages.agent",
|
||||
"packages.tryon",
|
||||
"packages.kb",
|
||||
"packages.billing",
|
||||
"packages.task",
|
||||
"packages.compliance",
|
||||
"packages.notify",
|
||||
"packages.wardrobe",
|
||||
]
|
||||
|
||||
# --- §3.2 硬性规则 1: 禁止直接查对方的表，只能走对方的 service ---
|
||||
[[tool.importlinter.contracts]]
|
||||
name = "no cross-domain repository (table) access"
|
||||
type = "forbidden"
|
||||
source_modules = [
|
||||
"packages.agent",
|
||||
"packages.billing",
|
||||
"packages.task",
|
||||
"packages.identity",
|
||||
"packages.compliance",
|
||||
]
|
||||
forbidden_modules = [
|
||||
"packages.agent.repo",
|
||||
"packages.billing.repo",
|
||||
"packages.task.repo",
|
||||
"packages.identity.repo",
|
||||
]
|
||||
unmatched_ignore_imports_alerting = "none"
|
||||
ignore_imports = [
|
||||
"packages.agent.* -> packages.agent.repo",
|
||||
"packages.billing.* -> packages.billing.repo",
|
||||
"packages.task.* -> packages.task.repo",
|
||||
"packages.identity.* -> packages.identity.repo",
|
||||
]
|
||||
|
||||
# --- §3.1 分层视图: L3 API → L4 业务域 → L5 AI 能力 → L6 数据 ---
|
||||
[[tool.importlinter.contracts]]
|
||||
name = "layered architecture (apps -> domains -> ai/shared -> domain)"
|
||||
type = "layers"
|
||||
layers = [
|
||||
"apps",
|
||||
"packages.agent | packages.report | packages.tryon | packages.profile | packages.notify | packages.wardrobe",
|
||||
"packages.task | packages.billing | packages.kb",
|
||||
"packages.compliance | packages.identity",
|
||||
"packages.llm | packages.retrieval | packages.rules | packages.memory",
|
||||
"packages.shared",
|
||||
"packages.domain",
|
||||
]
|
||||
exhaustive = false
|
||||
|
||||
# --- AI 能力层不得回头依赖业务域 (§4.3: llm-gateway 必须按远程调用设计) ---
|
||||
[[tool.importlinter.contracts]]
|
||||
name = "AI capability packages must not depend on business domains"
|
||||
type = "forbidden"
|
||||
source_modules = [
|
||||
"packages.llm",
|
||||
"packages.retrieval",
|
||||
"packages.rules",
|
||||
]
|
||||
forbidden_modules = [
|
||||
"packages.identity",
|
||||
"packages.profile",
|
||||
"packages.report",
|
||||
"packages.agent",
|
||||
"packages.tryon",
|
||||
"packages.kb",
|
||||
"packages.billing",
|
||||
"packages.task",
|
||||
"apps",
|
||||
]
|
||||
Reference in New Issue
Block a user