infra-lang 0.1.0__tar.gz

infra_lang-0.1.0/.gitignore

@@ -0,0 +1,45 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+build/
+dist/
+.venv/
+venv/
+
+# Tooling
+.coverage
+.coverage.*
+htmlcov/
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+.node_modules/
+
+# Project output
+infra-out/
+*.pyc
+
+# Editors / OS
+.idea/
+.vscode/
+.DS_Store
+*.swp
+
+# Env files
+.env
+.env.*
+!.env.example
+
+# VS Code extension build artifacts
+vscode-infra-lang/node_modules/
+vscode-infra-lang/out/
+
+# MkDocs build output
+site/
+.mutmut-cache/
+
+# Local E2E tools
+.tools/
+

infra_lang-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Infra Lang contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

infra_lang-0.1.0/PKG-INFO

@@ -0,0 +1,262 @@
+Metadata-Version: 2.5
+Name: infra-lang
+Version: 0.1.0
+Summary: Write infrastructure once, compile it to Kubernetes, Compose, or GitHub Actions
+Project-URL: Homepage, https://github.com/TuviDev/infra-lang
+Project-URL: Repository, https://github.com/TuviDev/infra-lang
+Project-URL: Documentation, https://github.com/TuviDev/infra-lang#readme
+Project-URL: Bug Tracker, https://github.com/TuviDev/infra-lang/issues
+Project-URL: Changelog, https://github.com/TuviDev/infra-lang/blob/main/CHANGELOG.md
+License-Expression: MIT
+License-File: LICENSE
+Keywords: devops,docker-compose,dsl,github-actions,iac,infrastructure,infrastructure-as-code,kubernetes,platform-engineering,sre,terraform
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Topic :: Software Development :: Compilers
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Systems Administration
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Requires-Dist: lark>=1.1.0
+Requires-Dist: prompt-toolkit>=3.0.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: ruamel-yaml>=0.18.0
+Requires-Dist: typer>=0.9.0
+Requires-Dist: watchdog>=4.0.0
+Provides-Extra: dev
+Requires-Dist: black>=24.0.0; extra == 'dev'
+Requires-Dist: hypothesis>=6.0.0; extra == 'dev'
+Requires-Dist: mypy>=1.0.0; extra == 'dev'
+Requires-Dist: pygls<2.0,>=1.3.0; extra == 'dev'
+Requires-Dist: pytest-cov>=5.0.0; extra == 'dev'
+Requires-Dist: pytest-xdist>=3.0.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.4.0; extra == 'dev'
+Provides-Extra: docs
+Requires-Dist: mkdocs-material>=9.5; extra == 'docs'
+Provides-Extra: lsp
+Requires-Dist: pygls<2.0,>=1.3.0; extra == 'lsp'
+Description-Content-Type: text/markdown
+
+# Infra Lang
+
+**Write infrastructure once, compile it to Kubernetes, Compose, or GitHub Actions.**
+
+[![CI](https://img.shields.io/github/actions/workflow/status/TuviDev/infra-lang/ci.yml?branch=main)](https://github.com/TuviDev/infra-lang/actions)
+[![Docs](https://img.shields.io/badge/docs-online-blue)](https://TuviDev.github.io/infra-lang/)
+[![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
+[![Python](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/)
+
+Infra Lang is an Infrastructure-as-Code DSL for DevOps engineers, SREs, and
+platform teams. You describe your application — services, databases, queues,
+secrets, and pipelines — in one declarative `.infra` file, and Infra Lang
+compiles it to Kubernetes YAML, Docker Compose, Terraform HCL, or a GitHub
+Actions workflow. Instead of hand-writing and maintaining the same app in four
+different formats, you maintain one source of truth.
+
+## Quick demo
+
+A single `.infra` file describes a service:
+
+```infra
+# app.infra
+service api {
+    image: "myapp/api:v1.0.0"
+    replicas: 3
+    port 8080
+    health http("/health")
+    resources {
+        requests { cpu: 200m, memory: 256Mi }
+        limits   { cpu: 1000m, memory: 512Mi }
+    }
+}
+```
+
+Compile it to Kubernetes:
+
+```bash
+infra compile app.infra --target kubernetes
+```
+
+Infra Lang produces the matching Deployment and Service:
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: api
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: api
+  template:
+    spec:
+      containers:
+        - name: api
+          image: myapp/api:v1.0.0
+          ports:
+            - containerPort: 8080
+              name: port-0
+          resources:
+            requests: { cpu: 200m, memory: 256Mi }
+            limits:   { cpu: 1000m, memory: 512Mi }
+          readinessProbe:
+            httpGet: { path: /health, port: 8080 }
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: api
+spec:
+  selector:
+    app.kubernetes.io/name: api
+  ports:
+    - port: 8080
+      targetPort: 8080
+```
+
+The same file compiles to Docker Compose with no rewriting:
+
+```bash
+infra compile app.infra --target compose
+```
+
+A `pipeline` block compiles to a GitHub Actions workflow:
+
+```infra
+pipeline ci {
+    trigger { branches: ["main"] }
+    stages {
+        test: { runsOn: "ubuntu-latest" steps { t: { run: "pytest" } } }
+    }
+}
+```
+
+```bash
+infra compile app.infra --target github
+```
+
+## Features
+
+- **11 top-level resource types** — `service`, `database`, `cache`, `queue`,
+  `storage`, `network`, `secret`, `config`, `pipeline`, `environment`,
+  `cluster`.
+- **5 compilation targets** — Kubernetes (17 resource kinds), **Helm charts**,
+  Docker Compose, Terraform HCL (AWS/GCP/Azure), GitHub Actions.
+- **Compiler-grade validation** — 30+ error codes with source locations and
+  actionable hints; invalid configs fail before anything is emitted.
+- **Built-in security linter** (SEC001–SEC010) and **reliability linter**
+  (REL001–REL014); `Error`-severity findings block compilation.
+- **A language server** — context-aware completion, hover docs, live
+  diagnostics with links and related info, go-to-definition, find-references,
+  workspace symbols, symbol rename, signature help, document highlight,
+  semantic tokens, folding, formatting, and quick-fixes — all across every
+  `.infra` file on disk.
+- **A formatter, REPL, and diff engine** — `infra fmt`, `infra repl`, and
+  `infra diff` for reviewing changes.
+- **Reusable pieces** — template-string interpolation, `import` with cycle
+  detection, `extends` inheritance, 25+ stdlib functions and a prelude of
+  shared constants.
+
+## Try it in Codespaces
+
+Click the button below to open this project in GitHub Codespaces:
+
+[![Open in Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/TuviDev/infra-lang)
+
+No local installation needed — full dev environment in about 2 minutes
+(Python 3.12, Docker-in-Docker, kubectl/helm, Ruff/Mypy extensions).
+
+## Installation
+
+```bash
+pip install git+https://github.com/TuviDev/infra-lang.git
+```
+
+With the language server (recommended for VS Code):
+
+```bash
+pip install 'infra-lang[lsp]'
+```
+
+Verify:
+
+```bash
+infra --version
+infra --help
+```
+
+> **Note:** PyPI publishing is coming soon. Until then, install from Git.
+
+**Requirements:** Python 3.11+.
+
+## Getting started
+
+Full documentation is hosted at **[TuviDev.github.io/infra-lang](https://TuviDev.github.io/infra-lang/)**.
+
+The fastest path is the [5-minute quickstart](https://TuviDev.github.io/infra-lang/quickstart/). In short:
+
+1. **Write** a `.infra` file (see the demo above).
+2. **Validate** it: `infra validate app.infra`
+3. **Compile** to a target: `infra compile app.infra --target kubernetes`
+4. **Inspect** the output in `infra-out/`, or preview with `--dry-run`.
+5. **Iterate** with `infra fmt app.infra` and `infra diff app.infra app2.infra`.
+
+There is also a [guided tutorial](https://TuviDev.github.io/infra-lang/tutorial/) and
+commented [examples](examples/).
+
+## Supported targets
+
+| Target | Command | What it generates |
+|--------|---------|-------------------|
+| **Kubernetes** | `-t kubernetes` | Deployments, Services, Ingress, StatefulSets, PVCs, ConfigMaps, Secrets, CronJobs, HPA, PDBs, NetworkPolicies, ResourceQuotas, Namespaces, RBAC, TopologySpreadConstraints |
+| **Helm** | `-t helm` | A complete chart: `Chart.yaml`, `values.yaml`, `templates/`, `_helpers.tpl`, `.helmignore` |
+| **Docker Compose** | `-t compose` | `docker-compose.yml`, `.env.example`, `Makefile` |
+| **Terraform** | `-t terraform` | `main.tf`, `variables.tf`, `outputs.tf`, `providers.tf` (AWS/GCP/Azure) |
+| **GitHub Actions** | `-t github` | `.github/workflows/*.yml`, `dependabot.yml` |
+
+Not every resource type maps to every target — for example, `pipeline` compiles
+only to GitHub Actions, and `cluster` only to Terraform. See the
+[support matrix](https://TuviDev.github.io/infra-lang/support_matrix/) for the
+full mapping.
+
+## Documentation
+
+The documentation is hosted at **[TuviDev.github.io/infra-lang](https://TuviDev.github.io/infra-lang/)**.
+
+| Doc | What it covers |
+|-----|----------------|
+| [Quickstart](https://TuviDev.github.io/infra-lang/quickstart/) | 5-minute first run |
+| [Language spec](https://TuviDev.github.io/infra-lang/language_spec/) | Full DSL reference (blocks, fields, error codes) |
+| [Support matrix](https://TuviDev.github.io/infra-lang/support_matrix/) | Which resources map to which targets |
+| [LSP / editor support](https://TuviDev.github.io/infra-lang/lsp/) | VS Code extension and language server |
+| [Known limitations](https://TuviDev.github.io/infra-lang/known_limitations/) | Honest boundaries of the project |
+
+## Contributing
+
+Contributions are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for how to
+set up a dev environment, add a backend or a grammar rule, and the coding
+standards (ruff, mypy). Please read our [Security policy](SECURITY.md) before
+reporting a vulnerability.
+
+## License
+
+Licensed under the [MIT License](LICENSE).
+
+---
+
+Infra Lang is inspired by the ideas behind [Terraform](https://www.terraform.io/),
+[Score](https://score.dev/), and [Pulumi](https://www.pulumi.com/): declarative
+infrastructure that is easy to read and hard to get wrong.

infra_lang-0.1.0/README.md

@@ -0,0 +1,211 @@
+# Infra Lang
+
+**Write infrastructure once, compile it to Kubernetes, Compose, or GitHub Actions.**
+
+[![CI](https://img.shields.io/github/actions/workflow/status/TuviDev/infra-lang/ci.yml?branch=main)](https://github.com/TuviDev/infra-lang/actions)
+[![Docs](https://img.shields.io/badge/docs-online-blue)](https://TuviDev.github.io/infra-lang/)
+[![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
+[![Python](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/)
+
+Infra Lang is an Infrastructure-as-Code DSL for DevOps engineers, SREs, and
+platform teams. You describe your application — services, databases, queues,
+secrets, and pipelines — in one declarative `.infra` file, and Infra Lang
+compiles it to Kubernetes YAML, Docker Compose, Terraform HCL, or a GitHub
+Actions workflow. Instead of hand-writing and maintaining the same app in four
+different formats, you maintain one source of truth.
+
+## Quick demo
+
+A single `.infra` file describes a service:
+
+```infra
+# app.infra
+service api {
+    image: "myapp/api:v1.0.0"
+    replicas: 3
+    port 8080
+    health http("/health")
+    resources {
+        requests { cpu: 200m, memory: 256Mi }
+        limits   { cpu: 1000m, memory: 512Mi }
+    }
+}
+```
+
+Compile it to Kubernetes:
+
+```bash
+infra compile app.infra --target kubernetes
+```
+
+Infra Lang produces the matching Deployment and Service:
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: api
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: api
+  template:
+    spec:
+      containers:
+        - name: api
+          image: myapp/api:v1.0.0
+          ports:
+            - containerPort: 8080
+              name: port-0
+          resources:
+            requests: { cpu: 200m, memory: 256Mi }
+            limits:   { cpu: 1000m, memory: 512Mi }
+          readinessProbe:
+            httpGet: { path: /health, port: 8080 }
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: api
+spec:
+  selector:
+    app.kubernetes.io/name: api
+  ports:
+    - port: 8080
+      targetPort: 8080
+```
+
+The same file compiles to Docker Compose with no rewriting:
+
+```bash
+infra compile app.infra --target compose
+```
+
+A `pipeline` block compiles to a GitHub Actions workflow:
+
+```infra
+pipeline ci {
+    trigger { branches: ["main"] }
+    stages {
+        test: { runsOn: "ubuntu-latest" steps { t: { run: "pytest" } } }
+    }
+}
+```
+
+```bash
+infra compile app.infra --target github
+```
+
+## Features
+
+- **11 top-level resource types** — `service`, `database`, `cache`, `queue`,
+  `storage`, `network`, `secret`, `config`, `pipeline`, `environment`,
+  `cluster`.
+- **5 compilation targets** — Kubernetes (17 resource kinds), **Helm charts**,
+  Docker Compose, Terraform HCL (AWS/GCP/Azure), GitHub Actions.
+- **Compiler-grade validation** — 30+ error codes with source locations and
+  actionable hints; invalid configs fail before anything is emitted.
+- **Built-in security linter** (SEC001–SEC010) and **reliability linter**
+  (REL001–REL014); `Error`-severity findings block compilation.
+- **A language server** — context-aware completion, hover docs, live
+  diagnostics with links and related info, go-to-definition, find-references,
+  workspace symbols, symbol rename, signature help, document highlight,
+  semantic tokens, folding, formatting, and quick-fixes — all across every
+  `.infra` file on disk.
+- **A formatter, REPL, and diff engine** — `infra fmt`, `infra repl`, and
+  `infra diff` for reviewing changes.
+- **Reusable pieces** — template-string interpolation, `import` with cycle
+  detection, `extends` inheritance, 25+ stdlib functions and a prelude of
+  shared constants.
+
+## Try it in Codespaces
+
+Click the button below to open this project in GitHub Codespaces:
+
+[![Open in Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/TuviDev/infra-lang)
+
+No local installation needed — full dev environment in about 2 minutes
+(Python 3.12, Docker-in-Docker, kubectl/helm, Ruff/Mypy extensions).
+
+## Installation
+
+```bash
+pip install git+https://github.com/TuviDev/infra-lang.git
+```
+
+With the language server (recommended for VS Code):
+
+```bash
+pip install 'infra-lang[lsp]'
+```
+
+Verify:
+
+```bash
+infra --version
+infra --help
+```
+
+> **Note:** PyPI publishing is coming soon. Until then, install from Git.
+
+**Requirements:** Python 3.11+.
+
+## Getting started
+
+Full documentation is hosted at **[TuviDev.github.io/infra-lang](https://TuviDev.github.io/infra-lang/)**.
+
+The fastest path is the [5-minute quickstart](https://TuviDev.github.io/infra-lang/quickstart/). In short:
+
+1. **Write** a `.infra` file (see the demo above).
+2. **Validate** it: `infra validate app.infra`
+3. **Compile** to a target: `infra compile app.infra --target kubernetes`
+4. **Inspect** the output in `infra-out/`, or preview with `--dry-run`.
+5. **Iterate** with `infra fmt app.infra` and `infra diff app.infra app2.infra`.
+
+There is also a [guided tutorial](https://TuviDev.github.io/infra-lang/tutorial/) and
+commented [examples](examples/).
+
+## Supported targets
+
+| Target | Command | What it generates |
+|--------|---------|-------------------|
+| **Kubernetes** | `-t kubernetes` | Deployments, Services, Ingress, StatefulSets, PVCs, ConfigMaps, Secrets, CronJobs, HPA, PDBs, NetworkPolicies, ResourceQuotas, Namespaces, RBAC, TopologySpreadConstraints |
+| **Helm** | `-t helm` | A complete chart: `Chart.yaml`, `values.yaml`, `templates/`, `_helpers.tpl`, `.helmignore` |
+| **Docker Compose** | `-t compose` | `docker-compose.yml`, `.env.example`, `Makefile` |
+| **Terraform** | `-t terraform` | `main.tf`, `variables.tf`, `outputs.tf`, `providers.tf` (AWS/GCP/Azure) |
+| **GitHub Actions** | `-t github` | `.github/workflows/*.yml`, `dependabot.yml` |
+
+Not every resource type maps to every target — for example, `pipeline` compiles
+only to GitHub Actions, and `cluster` only to Terraform. See the
+[support matrix](https://TuviDev.github.io/infra-lang/support_matrix/) for the
+full mapping.
+
+## Documentation
+
+The documentation is hosted at **[TuviDev.github.io/infra-lang](https://TuviDev.github.io/infra-lang/)**.
+
+| Doc | What it covers |
+|-----|----------------|
+| [Quickstart](https://TuviDev.github.io/infra-lang/quickstart/) | 5-minute first run |
+| [Language spec](https://TuviDev.github.io/infra-lang/language_spec/) | Full DSL reference (blocks, fields, error codes) |
+| [Support matrix](https://TuviDev.github.io/infra-lang/support_matrix/) | Which resources map to which targets |
+| [LSP / editor support](https://TuviDev.github.io/infra-lang/lsp/) | VS Code extension and language server |
+| [Known limitations](https://TuviDev.github.io/infra-lang/known_limitations/) | Honest boundaries of the project |
+
+## Contributing
+
+Contributions are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for how to
+set up a dev environment, add a backend or a grammar rule, and the coding
+standards (ruff, mypy). Please read our [Security policy](SECURITY.md) before
+reporting a vulnerability.
+
+## License
+
+Licensed under the [MIT License](LICENSE).
+
+---
+
+Infra Lang is inspired by the ideas behind [Terraform](https://www.terraform.io/),
+[Score](https://score.dev/), and [Pulumi](https://www.pulumi.com/): declarative
+infrastructure that is easy to read and hard to get wrong.

infra_lang-0.1.0/pyproject.toml

@@ -0,0 +1,121 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "infra-lang"
+version = "0.1.0"
+description = "Write infrastructure once, compile it to Kubernetes, Compose, or GitHub Actions"
+readme = "README.md"
+license = "MIT"
+license-files = ["LICENSE"]
+requires-python = ">=3.11"
+keywords = [
+    "infrastructure", "kubernetes", "docker-compose", "github-actions",
+    "terraform", "devops", "dsl", "iac", "infrastructure-as-code",
+    "platform-engineering", "sre",
+]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Intended Audience :: System Administrators",
+    "License :: OSI Approved :: MIT License",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: Implementation :: CPython",
+    "Topic :: Software Development :: Build Tools",
+    "Topic :: Software Development :: Compilers",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: System :: Systems Administration",
+    "Typing :: Typed",
+]
+dependencies = [
+    "lark>=1.1.0",
+    "typer>=0.9.0",
+    "rich>=13.0.0",
+    "ruamel.yaml>=0.18.0",
+    "pyyaml>=6.0",
+    "watchdog>=4.0.0",
+    "prompt_toolkit>=3.0.0",
+]
+
+[project.optional-dependencies]
+lsp = ["pygls>=1.3.0,<2.0"]
+docs = [
+    "mkdocs-material>=9.5",
+]
+dev = [
+    "pytest>=8.0.0",
+    "pytest-cov>=5.0.0",
+    "pytest-xdist>=3.0.0",
+    "hypothesis>=6.0.0",
+    "black>=24.0.0",
+    "ruff>=0.4.0",
+    "mypy>=1.0.0",
+    "pygls>=1.3.0,<2.0",
+]
+
+[project.scripts]
+infra = "infra.cli.main:app"
+
+[project.urls]
+Homepage = "https://github.com/TuviDev/infra-lang"
+Repository = "https://github.com/TuviDev/infra-lang"
+Documentation = "https://github.com/TuviDev/infra-lang#readme"
+"Bug Tracker" = "https://github.com/TuviDev/infra-lang/issues"
+Changelog = "https://github.com/TuviDev/infra-lang/blob/main/CHANGELOG.md"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/infra"]
+
+[tool.hatch.build]
+include = [
+    "src/infra/**/*.py",
+    "src/infra/**/*.lark",
+    "src/infra/**/*.infra",
+]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-n auto --dist=loadfile"
+markers = [
+    "unit: isolated, fast, no I/O",
+    "integration: multiple modules together",
+    "e2e: full user flow with subprocess",
+    "slow: takes > 2 seconds",
+    "behavioral: business behavior documentation",
+    "contracts: public API contract tests",
+    "live_e2e: real Docker/kind/kubectl E2E (skipped when tools missing)",
+]
+
+[tool.ruff]
+line-length = 88
+target-version = "py311"
+
+[tool.ruff.lint]
+select = ["E", "F", "W", "I", "N"]
+
+[tool.mypy]
+python_version = "3.11"
+ignore_missing_imports = true
+
+[tool.coverage.run]
+source = ["src/infra"]
+omit = ["*/tests/*", "*/__main__.py"]
+
+[tool.coverage.report]
+fail_under = 88
+show_missing = true
+
+[tool.mutmut]
+# Mutation testing. NOTE: the project uses a src/ layout; mutmut's coverage
+# mapping needs a flat package copy to associate tests with mutants. See
+# docs/testing_quality.md for the exact working procedure (run from a flat
+# copy with `source_paths = ["infra"]`).
+source_paths = ["src/infra"]
+pytest_add_cli_args = ["-q", "-p", "no:cacheprovider", "-o", "addopts=", "-k", "not live_e2e"]
+pytest_add_cli_args_test_selection = ["tests/test_security_checker.py", "tests/test_security_advanced.py"]