svc-infra 0.1.704__tar.gz → 1.6.1__tar.gz

{svc_infra-0.1.704 → svc_infra-1.6.1}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.3
 Name: svc-infra
-Version: 0.1.704
+Version: 1.6.1
 Summary: Infrastructure for building and deploying prod-ready services
 License: MIT
 Keywords: fastapi,sqlalchemy,alembic,auth,infra,async,pydantic
 Author: Ali Khatami
 Author-email: aliikhatami94@gmail.com
 Requires-Python: >=3.11,<4.0
-Classifier: Development Status :: 4 - Beta
+Classifier: Development Status :: 5 - Production/Stable
 Classifier: Framework :: FastAPI
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -16,18 +16,24 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Internet :: WWW/HTTP :: HTTP Servers
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Typing :: Typed
+Provides-Extra: adyen
 Provides-Extra: duckdb
 Provides-Extra: metrics
+Provides-Extra: mongodb
 Provides-Extra: mssql
 Provides-Extra: mysql
+Provides-Extra: payments
 Provides-Extra: pg
 Provides-Extra: pg2
 Provides-Extra: redshift
 Provides-Extra: s3
 Provides-Extra: snowflake
 Provides-Extra: sqlite
-Requires-Dist: adyen (>=10.0.0)
+Provides-Extra: stripe
+Requires-Dist: adyen (>=10.0.0) ; extra == "payments" or extra == "adyen"
 Requires-Dist: aioboto3 (>=12.0.0) ; extra == "s3"
 Requires-Dist: aiofiles (>=24.0.0)
 Requires-Dist: aiosqlite (>=0.19.0) ; extra == "sqlite"
@@ -45,7 +51,7 @@ Requires-Dist: httpx (>=0.25.0)
 Requires-Dist: httpx-oauth (>=0.15.0)
 Requires-Dist: itsdangerous (>=2.0.0)
 Requires-Dist: mcp (>=1.0.0)
-Requires-Dist: motor (>=3.0.0)
+Requires-Dist: motor (>=3.0.0) ; extra == "mongodb"
 Requires-Dist: mysqlclient (>=2.2.0) ; extra == "mysql"
 Requires-Dist: opentelemetry-exporter-otlp (>=1.20.0)
 Requires-Dist: opentelemetry-instrumentation-fastapi (>=0.41b0)
@@ -67,30 +73,36 @@ Requires-Dist: redis (>=5.0.0)
 Requires-Dist: redshift-connector (>=2.0.0) ; extra == "redshift"
 Requires-Dist: snowflake-connector-python (>=3.0.0) ; extra == "snowflake"
 Requires-Dist: sqlalchemy[asyncio] (>=2.0)
-Requires-Dist: stripe (>=7.0.0)
+Requires-Dist: stripe (>=7.0.0) ; extra == "payments" or extra == "stripe"
 Requires-Dist: typer (>=0.12.0)
 Requires-Dist: websockets (>=12.0)
-Project-URL: Documentation, https://github.com/your-org/svc-infra#readme
-Project-URL: Homepage, https://github.com/your-org/svc-infra
-Project-URL: Issues, https://github.com/your-org/svc-infra/issues
-Project-URL: Repository, https://github.com/your-org/svc-infra
+Project-URL: Documentation, https://nfrax.com/svc-infra
+Project-URL: Homepage, https://github.com/nfraxlab/svc-infra
+Project-URL: Issues, https://github.com/nfraxlab/svc-infra/issues
+Project-URL: Repository, https://github.com/nfraxlab/svc-infra
 Description-Content-Type: text/markdown
 
-<div align="center">
-
 # svc-infra
 
-### Production-ready FastAPI infrastructure in one import
+**Production-ready FastAPI infrastructure in one import.**
 
-[![PyPI](https://img.shields.io/pypi/v/svc-infra.svg)](https://pypi.org/project/svc-infra/) [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/) [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT) [![Downloads](https://static.pepy.tech/badge/svc-infra/month)](https://pepy.tech/project/svc-infra)
+[![PyPI](https://img.shields.io/pypi/v/svc-infra.svg)](https://pypi.org/project/svc-infra/)
+[![CI](https://github.com/nfraxlab/svc-infra/actions/workflows/ci.yml/badge.svg)](https://github.com/nfraxlab/svc-infra/actions/workflows/ci.yml)
+[![Python](https://img.shields.io/pypi/pyversions/svc-infra.svg)](https://pypi.org/project/svc-infra/)
+[![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
-**Stop rebuilding auth, billing, webhooks, and background jobs for every project.**
+## Overview
 
-[Documentation](docs/) · [Examples](examples/) · [PyPI](https://pypi.org/project/svc-infra/)
+Stop rebuilding auth, billing, webhooks, and background jobs for every project.
 
-</div>
+### Key Features
 
----
+- **Auth** - JWT, sessions, OAuth/OIDC, MFA, API keys
+- **Billing** - Usage tracking, subscriptions, invoices, Stripe sync
+- **Database** - PostgreSQL + MongoDB, migrations, inbox/outbox
+- **Jobs** - Background tasks, scheduling, retries, DLQ
+- **Webhooks** - Subscriptions, HMAC signing, delivery retries
+- **Observability** - Prometheus, Grafana dashboards, OTEL
 
 ## Why svc-infra?
 
@@ -102,34 +114,34 @@ Every FastAPI project needs the same things: authentication, database setup, bac
 from svc_infra.api.fastapi.ease import easy_service_app
 
 app = easy_service_app(name="MyAPI", release="1.0.0")
-# ✅ Health checks, CORS, security headers, structured logging
-# ✅ Prometheus metrics, OpenTelemetry tracing
-# ✅ Request IDs, idempotency middleware
+# Health checks, CORS, security headers, structured logging
+# Prometheus metrics, OpenTelemetry tracing
+# Request IDs, idempotency middleware
 # That's it. Ship it.
 ```
 
-## ⚡ Quick Install
+## Quick Install
 
 ```bash
 pip install svc-infra
 ```
 
-## 🎯 What's Included
+## What's Included
 
 | Feature | What You Get | One-liner |
 |---------|-------------|-----------|
-| **🔐 Auth** | JWT, sessions, OAuth/OIDC, MFA, API keys | `add_auth_users(app)` |
-| **💳 Billing** | Usage tracking, subscriptions, invoices, Stripe sync | `add_billing(app)` |
-| **📦 Database** | PostgreSQL + MongoDB, migrations, inbox/outbox | `add_sql_db(app)` |
-| **⚡ Jobs** | Background tasks, scheduling, retries, DLQ | `easy_jobs()` |
-| **🔗 Webhooks** | Subscriptions, HMAC signing, delivery retries | `add_webhooks(app)` |
-| **💾 Cache** | Redis/memory, decorators, namespacing | `init_cache()` |
-| **📊 Observability** | Prometheus, Grafana dashboards, OTEL | Built-in |
-| **📁 Storage** | S3, local, memory backends | `add_storage(app)` |
-| **🏢 Multi-tenancy** | Tenant isolation, scoped queries | Built-in |
-| **🚦 Rate Limiting** | Per-user, per-endpoint, headers | Built-in |
-
-## 🚀 30-Second Example
+| **Auth** | JWT, sessions, OAuth/OIDC, MFA, API keys | `add_auth_users(app)` |
+| **Billing** | Usage tracking, subscriptions, invoices, Stripe sync | `add_billing(app)` |
+| **Database** | PostgreSQL + MongoDB, migrations, inbox/outbox | `add_sql_db(app)` |
+| **Jobs** | Background tasks, scheduling, retries, DLQ | `easy_jobs()` |
+| **Webhooks** | Subscriptions, HMAC signing, delivery retries | `add_webhooks(app)` |
+| **Cache** | Redis/memory, decorators, namespacing | `init_cache()` |
+| **Observability** | Prometheus, Grafana dashboards, OTEL | Built-in |
+| **Storage** | S3, local, memory backends | `add_storage(app)` |
+| **Multi-tenancy** | Tenant isolation, scoped queries | Built-in |
+| **Rate Limiting** | Per-user, per-endpoint, headers | Built-in |
+
+## 30-Second Example
 
 Build a complete SaaS backend:
 
@@ -164,9 +176,9 @@ async def stripe_webhook(payload=Depends(require_signature(lambda: ["whsec_..."]
 
 **That's a production-ready API** with auth, database, background jobs, and webhook handling.
 
-## 📚 Feature Highlights
+## Feature Highlights
 
-### 🔐 Authentication & Security
+### Authentication & Security
 
 Full auth system with zero boilerplate:
 
@@ -182,7 +194,7 @@ async def get_profile(user=Depends(current_active_user)):
 
 **Includes:** JWT tokens, session cookies, OAuth/OIDC (Google, GitHub, etc.), MFA/TOTP, password policies, account lockout, key rotation.
 
-### 💳 Usage-Based Billing
+### Usage-Based Billing
 
 Track usage and generate invoices:
 
@@ -203,7 +215,7 @@ invoice = billing.generate_monthly_invoice(
 
 **Includes:** Usage events, aggregation, plans & entitlements, subscriptions, invoices, Stripe sync hooks.
 
-### ⚡ Background Jobs
+### Background Jobs
 
 Redis-backed job queue with retries:
 
@@ -226,7 +238,7 @@ svc-infra jobs run
 
 **Includes:** Visibility timeout, exponential backoff, dead letter queue, interval scheduler, CLI worker.
 
-### 🔗 Webhooks
+### Webhooks
 
 Send and receive webhooks with proper security:
 
@@ -246,7 +258,7 @@ async def receive(payload=Depends(require_signature(lambda: ["secret1", "secret2
 
 **Includes:** Subscription store, HMAC-SHA256 signing, delivery retries, idempotent processing.
 
-### 📊 Observability
+### Observability
 
 Production monitoring out of the box:
 
@@ -264,7 +276,7 @@ svc-infra obs dashboard --service myapi --output ./dashboards/
 
 **Includes:** Prometheus metrics, Grafana dashboard generator, OTEL integration, SLO helpers.
 
-## ⚙️ Configuration
+## Configuration
 
 Everything is configurable via environment variables:
 
@@ -292,7 +304,7 @@ METRICS_PATH=/metrics
 
 See the [Environment Reference](docs/environment.md) for all options.
 
-## 📖 Documentation
+## Documentation
 
 | Module | Description | Guide |
 |--------|-------------|-------|
@@ -309,7 +321,7 @@ See the [Environment Reference](docs/environment.md) for all options.
 | **Tenancy** | Multi-tenant isolation | [docs/tenancy.md](docs/tenancy.md) |
 | **CLI** | Command-line tools | [docs/cli.md](docs/cli.md) |
 
-## 🏃 Running the Example
+## Running the Example
 
 See all features working together:
 
@@ -324,7 +336,7 @@ make run-template      # Starts at http://localhost:8001
 
 Visit http://localhost:8001/docs to explore the API.
 
-## 🤝 Related Packages
+## Related Packages
 
 svc-infra is part of the **nfrax** infrastructure suite:
 
@@ -334,7 +346,7 @@ svc-infra is part of the **nfrax** infrastructure suite:
 | **[ai-infra](https://github.com/nfraxlab/ai-infra)** | AI/LLM infrastructure (agents, tools, RAG, MCP) |
 | **[fin-infra](https://github.com/nfraxlab/fin-infra)** | Financial infrastructure (banking, portfolio, insights) |
 
-## 📄 License
+## License
 
 MIT License - use it for anything.
 
@@ -342,9 +354,9 @@ MIT License - use it for anything.
 
 <div align="center">
 
-**Built with ❤️ by [nfraxlab](https://github.com/nfraxlab)**
+**Built by [nfraxlab](https://github.com/nfraxlab)**
 
-[⭐ Star us on GitHub](https://github.com/nfraxlab/svc-infra) · [📦 View on PyPI](https://pypi.org/project/svc-infra/)
+[Star us on GitHub](https://github.com/nfraxlab/svc-infra) · [View on PyPI](https://pypi.org/project/svc-infra/)
 
 </div>
 

{svc_infra-0.1.704 → svc_infra-1.6.1}/README.md

@@ -1,18 +1,24 @@
-<div align="center">
-
 # svc-infra
 
-### Production-ready FastAPI infrastructure in one import
+**Production-ready FastAPI infrastructure in one import.**
 
-[![PyPI](https://img.shields.io/pypi/v/svc-infra.svg)](https://pypi.org/project/svc-infra/) [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/) [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT) [![Downloads](https://static.pepy.tech/badge/svc-infra/month)](https://pepy.tech/project/svc-infra)
+[![PyPI](https://img.shields.io/pypi/v/svc-infra.svg)](https://pypi.org/project/svc-infra/)
+[![CI](https://github.com/nfraxlab/svc-infra/actions/workflows/ci.yml/badge.svg)](https://github.com/nfraxlab/svc-infra/actions/workflows/ci.yml)
+[![Python](https://img.shields.io/pypi/pyversions/svc-infra.svg)](https://pypi.org/project/svc-infra/)
+[![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
-**Stop rebuilding auth, billing, webhooks, and background jobs for every project.**
+## Overview
 
-[Documentation](docs/) · [Examples](examples/) · [PyPI](https://pypi.org/project/svc-infra/)
+Stop rebuilding auth, billing, webhooks, and background jobs for every project.
 
-</div>
+### Key Features
 
----
+- **Auth** - JWT, sessions, OAuth/OIDC, MFA, API keys
+- **Billing** - Usage tracking, subscriptions, invoices, Stripe sync
+- **Database** - PostgreSQL + MongoDB, migrations, inbox/outbox
+- **Jobs** - Background tasks, scheduling, retries, DLQ
+- **Webhooks** - Subscriptions, HMAC signing, delivery retries
+- **Observability** - Prometheus, Grafana dashboards, OTEL
 
 ## Why svc-infra?
 
@@ -24,34 +30,34 @@ Every FastAPI project needs the same things: authentication, database setup, bac
 from svc_infra.api.fastapi.ease import easy_service_app
 
 app = easy_service_app(name="MyAPI", release="1.0.0")
-# ✅ Health checks, CORS, security headers, structured logging
-# ✅ Prometheus metrics, OpenTelemetry tracing
-# ✅ Request IDs, idempotency middleware
+# Health checks, CORS, security headers, structured logging
+# Prometheus metrics, OpenTelemetry tracing
+# Request IDs, idempotency middleware
 # That's it. Ship it.
 ```
 
-## ⚡ Quick Install
+## Quick Install
 
 ```bash
 pip install svc-infra
 ```
 
-## 🎯 What's Included
+## What's Included
 
 | Feature | What You Get | One-liner |
 |---------|-------------|-----------|
-| **🔐 Auth** | JWT, sessions, OAuth/OIDC, MFA, API keys | `add_auth_users(app)` |
-| **💳 Billing** | Usage tracking, subscriptions, invoices, Stripe sync | `add_billing(app)` |
-| **📦 Database** | PostgreSQL + MongoDB, migrations, inbox/outbox | `add_sql_db(app)` |
-| **⚡ Jobs** | Background tasks, scheduling, retries, DLQ | `easy_jobs()` |
-| **🔗 Webhooks** | Subscriptions, HMAC signing, delivery retries | `add_webhooks(app)` |
-| **💾 Cache** | Redis/memory, decorators, namespacing | `init_cache()` |
-| **📊 Observability** | Prometheus, Grafana dashboards, OTEL | Built-in |
-| **📁 Storage** | S3, local, memory backends | `add_storage(app)` |
-| **🏢 Multi-tenancy** | Tenant isolation, scoped queries | Built-in |
-| **🚦 Rate Limiting** | Per-user, per-endpoint, headers | Built-in |
-
-## 🚀 30-Second Example
+| **Auth** | JWT, sessions, OAuth/OIDC, MFA, API keys | `add_auth_users(app)` |
+| **Billing** | Usage tracking, subscriptions, invoices, Stripe sync | `add_billing(app)` |
+| **Database** | PostgreSQL + MongoDB, migrations, inbox/outbox | `add_sql_db(app)` |
+| **Jobs** | Background tasks, scheduling, retries, DLQ | `easy_jobs()` |
+| **Webhooks** | Subscriptions, HMAC signing, delivery retries | `add_webhooks(app)` |
+| **Cache** | Redis/memory, decorators, namespacing | `init_cache()` |
+| **Observability** | Prometheus, Grafana dashboards, OTEL | Built-in |
+| **Storage** | S3, local, memory backends | `add_storage(app)` |
+| **Multi-tenancy** | Tenant isolation, scoped queries | Built-in |
+| **Rate Limiting** | Per-user, per-endpoint, headers | Built-in |
+
+## 30-Second Example
 
 Build a complete SaaS backend:
 
@@ -86,9 +92,9 @@ async def stripe_webhook(payload=Depends(require_signature(lambda: ["whsec_..."]
 
 **That's a production-ready API** with auth, database, background jobs, and webhook handling.
 
-## 📚 Feature Highlights
+## Feature Highlights
 
-### 🔐 Authentication & Security
+### Authentication & Security
 
 Full auth system with zero boilerplate:
 
@@ -104,7 +110,7 @@ async def get_profile(user=Depends(current_active_user)):
 
 **Includes:** JWT tokens, session cookies, OAuth/OIDC (Google, GitHub, etc.), MFA/TOTP, password policies, account lockout, key rotation.
 
-### 💳 Usage-Based Billing
+### Usage-Based Billing
 
 Track usage and generate invoices:
 
@@ -125,7 +131,7 @@ invoice = billing.generate_monthly_invoice(
 
 **Includes:** Usage events, aggregation, plans & entitlements, subscriptions, invoices, Stripe sync hooks.
 
-### ⚡ Background Jobs
+### Background Jobs
 
 Redis-backed job queue with retries:
 
@@ -148,7 +154,7 @@ svc-infra jobs run
 
 **Includes:** Visibility timeout, exponential backoff, dead letter queue, interval scheduler, CLI worker.
 
-### 🔗 Webhooks
+### Webhooks
 
 Send and receive webhooks with proper security:
 
@@ -168,7 +174,7 @@ async def receive(payload=Depends(require_signature(lambda: ["secret1", "secret2
 
 **Includes:** Subscription store, HMAC-SHA256 signing, delivery retries, idempotent processing.
 
-### 📊 Observability
+### Observability
 
 Production monitoring out of the box:
 
@@ -186,7 +192,7 @@ svc-infra obs dashboard --service myapi --output ./dashboards/
 
 **Includes:** Prometheus metrics, Grafana dashboard generator, OTEL integration, SLO helpers.
 
-## ⚙️ Configuration
+## Configuration
 
 Everything is configurable via environment variables:
 
@@ -214,7 +220,7 @@ METRICS_PATH=/metrics
 
 See the [Environment Reference](docs/environment.md) for all options.
 
-## 📖 Documentation
+## Documentation
 
 | Module | Description | Guide |
 |--------|-------------|-------|
@@ -231,7 +237,7 @@ See the [Environment Reference](docs/environment.md) for all options.
 | **Tenancy** | Multi-tenant isolation | [docs/tenancy.md](docs/tenancy.md) |
 | **CLI** | Command-line tools | [docs/cli.md](docs/cli.md) |
 
-## 🏃 Running the Example
+## Running the Example
 
 See all features working together:
 
@@ -246,7 +252,7 @@ make run-template      # Starts at http://localhost:8001
 
 Visit http://localhost:8001/docs to explore the API.
 
-## 🤝 Related Packages
+## Related Packages
 
 svc-infra is part of the **nfrax** infrastructure suite:
 
@@ -256,7 +262,7 @@ svc-infra is part of the **nfrax** infrastructure suite:
 | **[ai-infra](https://github.com/nfraxlab/ai-infra)** | AI/LLM infrastructure (agents, tools, RAG, MCP) |
 | **[fin-infra](https://github.com/nfraxlab/fin-infra)** | Financial infrastructure (banking, portfolio, insights) |
 
-## 📄 License
+## License
 
 MIT License - use it for anything.
 
@@ -264,8 +270,8 @@ MIT License - use it for anything.
 
 <div align="center">
 
-**Built with ❤️ by [nfraxlab](https://github.com/nfraxlab)**
+**Built by [nfraxlab](https://github.com/nfraxlab)**
 
-[⭐ Star us on GitHub](https://github.com/nfraxlab/svc-infra) · [📦 View on PyPI](https://pypi.org/project/svc-infra/)
+[Star us on GitHub](https://github.com/nfraxlab/svc-infra) · [View on PyPI](https://pypi.org/project/svc-infra/)
 
 </div>

{svc_infra-0.1.704 → svc_infra-1.6.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "svc-infra"
-version = "0.1.704"
+version = "1.6.1"
 description = "Infrastructure for building and deploying prod-ready services"
 authors = ["Ali Khatami <aliikhatami94@gmail.com>"]
 license = "MIT"
@@ -17,7 +17,7 @@ include = [
 ]
 
 classifiers = [
-    "Development Status :: 4 - Beta",
+    "Development Status :: 5 - Production/Stable",
     "Intended Audience :: Developers",
     "License :: OSI Approved :: MIT License",
     "Programming Language :: Python :: 3",
@@ -25,15 +25,17 @@ classifiers = [
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Topic :: Internet :: WWW/HTTP :: HTTP Servers",
+    "Topic :: Software Development :: Libraries :: Python Modules",
     "Framework :: FastAPI",
     "Typing :: Typed"
 ]
 
 [tool.poetry.urls]
-Homepage = "https://github.com/your-org/svc-infra"
-Repository = "https://github.com/your-org/svc-infra"
-Issues = "https://github.com/your-org/svc-infra/issues"
-Documentation = "https://github.com/your-org/svc-infra#readme"
+Homepage = "https://github.com/nfraxlab/svc-infra"
+Repository = "https://github.com/nfraxlab/svc-infra"
+Issues = "https://github.com/nfraxlab/svc-infra/issues"
+Documentation = "https://nfrax.com/svc-infra"
 
 [tool.poetry.dependencies]
 python = ">=3.11,<4.0"
@@ -81,23 +83,31 @@ opentelemetry-instrumentation-httpx = ">=0.41b0"
 opentelemetry-exporter-otlp = ">=1.20.0"
 opentelemetry-propagator-b3 = ">=1.20.0"
 prometheus-client = ">=0.18.0"
-psycopg2-binary = ">=2.9.0"
-motor = ">=3.0.0"
 redis = ">=5.0.0"
 cashews = {extras = ["redis"], version = ">=7.0"}
 itsdangerous = ">=2.0.0"
 pyotp = ">=2.9.0"
-stripe = ">=7.0.0"
-adyen = ">=10.0.0"
 websockets = ">=12.0"
 
+# Optional dependencies (install via extras)
+motor = { version = ">=3.0.0", optional = true }
+stripe = { version = ">=7.0.0", optional = true }
+adyen = { version = ">=10.0.0", optional = true }
+psycopg2-binary = { version = ">=2.9.0", optional = true }
+
 [tool.poetry.extras]
-# Postgres v3
+# Postgres v3 (recommended)
 pg = ["psycopg", "asyncpg"]
-# Postgres v2 (choose either psycopg2 or psycopg2-binary—here we pick binary)
+# Postgres v2 (legacy compatibility)
 pg2 = ["psycopg2-binary"]
 sqlite = ["aiosqlite"]
 mysql = ["pymysql", "mysqlclient"]
+# Payment providers
+payments = ["stripe", "adyen"]
+stripe = ["stripe"]
+adyen = ["adyen"]
+# MongoDB
+mongodb = ["motor"]
 mssql = ["pyodbc"]
 snowflake = ["snowflake-connector-python"]
 redshift = ["redshift-connector"]
@@ -108,6 +118,8 @@ s3 = ["aioboto3"]
 [tool.poetry.group.dev.dependencies]
 pytest = ">=8.0.0"
 pytest-asyncio = ">=0.23.0"
+pytest-cov = ">=4.0.0"
+pytest-benchmark = ">=4.0.0"
 ruff = ">=0.6.0"
 mypy = ">=1.10.0"
 types-requests = ">=2.31.0"
@@ -117,6 +129,13 @@ fakeredis = ">=2.20.0"
 moto = {extras = ["s3"], version = ">=5.0.0"}
 aiosqlite = ">=0.19.0"  # Required for acceptance tests using SQLite
 pre-commit = ">=3.0.0"
+bandit = ">=1.7.0"
+pip-audit = ">=2.7.0"  # Security vulnerability scanning
+python-semantic-release = ">=9.0.0"
+# Documentation
+mkdocs = ">=1.6.0"
+mkdocs-material = ">=9.5.0"
+griffe = "^1.15.0"
 
 [tool.poetry.scripts]
 svc-infra = "svc_infra.cli:main"
@@ -146,6 +165,95 @@ filterwarnings = [
     "ignore:The `route` decorator is deprecated:DeprecationWarning:starlette.*",
 ]
 
+[tool.ruff]
+line-length = 100
+target-version = "py311"
+
+[tool.ruff.lint]
+select = [
+    "E",      # pycodestyle errors
+    "W",      # pycodestyle warnings
+    "F",      # Pyflakes
+    "I",      # isort
+    "B",      # flake8-bugbear
+    "C4",     # flake8-comprehensions
+    "UP",     # pyupgrade
+    "SIM",    # flake8-simplify
+    "RUF",    # Ruff-specific rules
+]
+
+ignore = [
+    "E501",    # line too long (handled by formatter)
+    "RUF022",  # __all__ not sorted (we use logical grouping)
+    "RUF012",  # mutable class attrs (handled by dataclass/pydantic)
+    "B007",    # unused loop variable (often intentional)
+    "B008",    # function call in default arg (typer.Option pattern)
+    "B027",    # empty method in ABC (intentional for optional callbacks)
+    "B904",    # raise from err (not always clearer)
+    "B905",    # zip strict (Python 3.10+ only, adds verbosity)
+    "SIM102",  # nested if statements (sometimes clearer)
+    "SIM103",  # return condition directly (sometimes clearer with if)
+    "SIM105",  # contextlib.suppress (explicit try/except often clearer)
+    "SIM108",  # ternary operator (readability preference)
+    "SIM110",  # use all() (sometimes clearer with explicit loop)
+    "SIM113",  # use enumerate (sometimes clearer without)
+    "SIM115",  # context manager for files (not always applicable)
+    "SIM117",  # single with statement (sometimes clearer separate)
+    "SIM118",  # key in dict vs dict.keys() (minor)
+    "UP028",   # yield from (sometimes clearer with explicit yield)
+    "UP038",   # isinstance(x, (A, B)) - deprecated rule, requires unsafe fixes
+    "RUF001",  # ambiguous unicode char in string (intentional in docs)
+    "RUF002",  # ambiguous unicode char in docstring (intentional curly quotes)
+    "RUF003",  # ambiguous unicode char in comment (intentional curly quotes)
+    "B023",    # function uses loop variable (often intentional in closures)
+    "B039",    # contextvar default mutable (handled by contextvar)
+]
+
+[tool.ruff.lint.per-file-ignores]
+"tests/**/*.py" = [
+    "B018",    # useless expression in tests is fine
+]
+
+[tool.ruff.lint.isort]
+known-first-party = ["svc_infra"]
+
+[tool.ruff.lint.pydocstyle]
+convention = "google"
+
+[tool.bandit]
+exclude_dirs = ["tests", ".venv", "venv"]
+skips = [
+    "B101",  # assert used (intentional in tests and contracts)
+    "B104",  # hardcoded_bind_all_interfaces (intentional for container deployments)
+    "B310",  # urllib urlopen (URL is validated/trusted in our code)
+    "B311",  # random for non-crypto (intentional)
+    "B324",  # SHA1/MD5 hash - used for cache keys and HIBP API, not security
+]
+
+[tool.coverage.run]
+source = ["src/svc_infra"]
+branch = true
+omit = ["*/tests/*", "*/__pycache__/*"]
+
+[tool.coverage.report]
+exclude_lines = ["pragma: no cover", "if TYPE_CHECKING:", "raise NotImplementedError"]
+fail_under = 60
+show_missing = true
+
+# Semantic Release configuration
+[tool.semantic_release]
+version_toml = ["pyproject.toml:tool.poetry.version"]
+branch = "main"
+tag_format = "v{version}"
+changelog_file = "CHANGELOG.md"
+upload_to_pypi = false
+upload_to_release = false
+
+[tool.semantic_release.commit_parser_options]
+allowed_tags = ["feat", "fix", "perf", "refactor", "docs", "chore", "test", "build", "ci"]
+minor_tags = ["feat"]
+patch_tags = ["fix", "perf"]
+
 [build-system]
 requires = ["poetry-core>=2.0.0,<3.0.0"]
 build-backend = "poetry.core.masonry.api"