req_managed_agents

defmodule ReqManagedAgents.MixProject do
  use Mix.Project

  @version "0.13.0"
  @source_url "https://github.com/cash-mckeeman/req_managed_agents"

  def project do
    [
      app: :req_managed_agents,
      version: @version,
      elixir: "~> 1.20",
      elixirc_paths: elixirc_paths(Mix.env()),
      start_permanent: Mix.env() == :prod,
      deps: deps(),
      description:
        "Provider-agnostic Elixir client for agent runtimes — one Session loop, any " <>
          "loop host: server-side (Anthropic Claude Managed Agents, AWS Bedrock " <>
          "AgentCore) or in-process (Local, over any OpenAI-compatible chat endpoint). " <>
          "Your tools run locally.",
      package: package(),
      docs: docs(),
      dialyzer: dialyzer(),
      hex: hex(),
      name: "ReqManagedAgents",
      source_url: @source_url,
      elixirc_options: [
        no_warn_undefined: [
          AWSAuth,
          AWSAuth.Credentials,
          AWSEventStream,
          AWSEventStream.JSON,
          ReqLLM,
          ReqLLM.Context,
          ReqLLM.ToolCall,
          ReqLLM.Tool,
          ReqLLM.Response
        ]
      ]
    ]
  end

  def application do
    [
      extra_applications: [:logger],
      mod: {ReqManagedAgents.Application, []}
    ]
  end

  defp elixirc_paths(:test), do: ["lib", "test/support"]
  defp elixirc_paths(_), do: ["lib"]

  defp deps do
    [
      {:req, "~> 0.5"},
      {:finch, "~> 0.24"},
      {:jason, "~> 1.4"},
      {:telemetry, "~> 1.0"},
      # Req.Test (used to stub HTTP in unary tests) needs Plug; Req lists it as
      # optional, so declare it explicitly rather than relying on a transitive dep.
      {:plug, "~> 1.0", only: :test},
      # Bypass runs a real chunked HTTP server for the SSE Stream/Session tests.
      {:bypass, "~> 2.1", only: :test},
      # AWS deps are optional: only the Bedrock AgentCore provider needs them.
      # Anthropic-only consumers skip them; AgentCore raises a clear error at
      # first use if they're missing (ReqManagedAgents.AgentCore.Deps).
      {:ex_aws_auth, "~> 1.4", optional: true},
      {:aws_event_stream, "~> 0.1", optional: true},
      # req_llm is optional: only the Local provider's DEFAULT chat_fun needs it.
      # Injected chat_funs (tests, Ollama, mimir lanes) work without it;
      # Local raises a clear error at first use if it's missing (Local.Deps).
      {:req_llm, "~> 1.10", optional: true},
      {:ex_doc, "~> 0.34", only: :dev, runtime: false},
      {:credo, "~> 1.7", only: [:dev, :test], runtime: false},
      {:dialyxir, "~> 1.4", only: [:dev, :test], runtime: false}
    ]
  end

  defp dialyzer do
    [
      # Keep PLTs under priv/plts so CI can cache them across runs.
      plt_local_path: "priv/plts",
      plt_core_path: "priv/plts",
      # Mix tasks call Mix.shell/Mix.raise; Mix isn't in the core PLT.
      # :ex_unit — test/support modules (StoreContract) import ExUnit.Assertions
      # and CI dialyzes under MIX_ENV=test.
      plt_add_apps: [:mix, :ex_unit, :eex],
      ignore_warnings: ".dialyzer_ignore.exs"
    ]
  end

  # Read by `mix hex.audit` (Hex 2.5.1+), which warns once an entry stops
  # matching. cowlib is test-only (bypass -> plug_cowboy -> cowboy), and no
  # release fixes these two (checked 2026-10-01).
  defp hex do
    [
      ignore_advisories: [
        # HTTP response splitting in cow_http_struct_hd:escape_string/2
        "EEF-CVE-2026-43966",
        # Cookie request header injection in cow_cookie:cookie/1
        "EEF-CVE-2026-43969"
      ]
    ]
  end

  defp package do
    [
      licenses: ["Apache-2.0"],
      links: %{"GitHub" => @source_url},
      maintainers: ["cash-mckeeman"],
      # lib/mix is excluded on purpose: the QA/smoke mix tasks are internal
      # runbooks, not consumer surface.
      files:
        ~w(lib/req_managed_agents lib/req_managed_agents.ex examples priv/runtime_bootstrap mix.exs
                README.md LICENSE CHANGELOG.md)
    ]
  end

  defp docs do
    [
      main: "readme",
      extras: ["README.md", "CHANGELOG.md"],
      source_ref: source_ref(),
      source_url_pattern:
        "#{@source_url}/blob/#{source_ref()}/req_managed_agents/%{path}#L%{line}"
    ]
  end

  # The tag that publishes this version: vX.Y.0 for a lockstep minor,
  # req_managed_agents-vX.Y.Z for a patch.
  defp source_ref do
    case Version.parse!(@version) do
      %Version{patch: 0} -> "v#{@version}"
      _ -> "req_managed_agents-v#{@version}"
    end
  end
end